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ABSTRACT: 

A method and apparatus of securing access to a service manager for the administration of 
services residing on multiple service host computers from an administration server computer is 
described. A user identifier, such as a user name, and a corresponding password are provided to 
the service manager. The user identifier is associated with a system administrator having 
administrative access to the services. The service manager authenticates the user by comparing 
the user identifier and password against a list of user identifiers and corresponding passwords 
stored in a persistent memory. A list of services to which the system administrator has 
administrative access is derived from the data in persistent memory. When the system 
administrator makes a request to administer one or more services from the list of services the 
administrator's access control is verified at the service host computers on which the requested 
services reside by examining access control data in the persistent memory. Management files are 
transferred from the service host computers to the administration server computer thereby 
facilitating manipulation of the management files utilizing'the service manager. 
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FtKa-fS i^Xf-A • TFS— X h F 5 - 
x h M x -r f ■ Tf-tXZfrt&y—t'xcoV X F 
5:. T^-ferX ■ ny-Fn-yu - ^^-XAW^aj-r^,. 
^-b'x • *XK - 3>-tV-^±{c#^S-9--t'x 
■ *XF • ^'J^r^f^i. *^*Hrt(ctStt$itT 
H&^X-f A • rFS-XFU—^tWa-rST^-bX 

A • T F 5 —X h ly- ^^'-y-- b'xco y x F 
ix^-y-- t'X^7? -tX Srffnr $ ilT V ^ £ t y 
7r>f-T^. f-^fiSnyf-^yMi -9"-b*x- 
*Xh • nytfa-^icsttsv^y^yh • 7r 
-f^SrTFS^XFly-iygy ^-A- ziyVj.—? 
^mmt. ZiXiZX^X. ^-b'X • -7^-jy>$-^ 

[0012] ^mmwom&T'ti.. ■ ro/ 

7ASrWf-2>TFS^XFIy-iy3y- 7=y4Tyb 
b. ^-b'X • *XF • 3yt A -?tMCP/I P 
Srfc'cM y F • TaFn^£&fflLT8£§ft 
^:TF5-XFly— iy g y • t-A')1^3yta- ? • 
^•y h>7-^rtcO-9-— b'X ■ *X h • 3yta-^l(; 

^^rrs^-bxcor fs— x h v-y 3 >-^ffig-ri> 

TD7 -f-/U • r-^ ■ U^iy'F 'Jfctx— «f • Ty*-feX 
• K/P. ?-£xcr> \) x bRX/J^X'7- F £^tf.x- 
-tm«{cra-tST->'^<g*W-§„ TFS^XFly-^ 
3 y • if-A±fc:Sq£-tSHf-b*x • • 
3>^-^yF^i-s®fi>fyy'-7i-x{i. JL- 
if^S^N-xv-F5rSfiL, ^ii^cotPg^J--if ■ 
Tnyj-fr- t-7 ■ VXybVKmm'h. -9--t' 
X • *Xh±(c^£nrfjg^3y^-^y h • 3^7 
j-U-v-h y • r-f lyy* h 'JJi. if-b'xtcjR-rsv* 
iy'yOF • ; E:iy'a-^5:1SSW-|,3y--K-^yF • 3y 
7-f^rjuly-$y 3 y • 7 r 4 )\s$:i$Xs . -?*i/j(yb ■ 
^y.-Mi^r-t'Xff)T F 5-X h ly-v- 3 ylzim 

~*Iffi&-?* ; y*yb ■ T-fitrti. jfflfg-f 
-7x-x{iTFS^xhly-£y 3 y • Hf-ys' • rjyb 
j.-^±(c^i£1-|.^-b'x • *x |> • -tfyny^-^ 
yhSrW1"l>. t-t'x-*xh • -fyziy^-^y^ 
\t2--V&RW*X7-b£%tEL. -t-b'X • *Xh 
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-fx ■ h^&fiU ^'J^-f^-ya >ii3-— f 

[ooi3] *%mt zcoM%2>%)mtmmmizm~i 
< &LT<?>mm>t>m *> < mmx-z h . 

[00 14] 

mi i m#z n^mmmizmfctz z t *«a*-4 

[00 15] nyta-^ - * 7 h7-^-feyN7 

<-*t£^r-rs*ffi«i3^h- A -? • *y hv-^T 

-h'* • *XK BP*>. *£SO*y ■ -9--ACD 

mt&mm (wc. • ty'i-w7r>f 

^ItT7KS-XM/-5' • Hf-y^ATJ-tS. 7 
b^-XbV-9 ■ (m : We bt-A') tffjfc 

&TTUv--xa y ■ • ^ -j^-zuoa-y 

-5/ a 9 -fe * »TigT& & . -y Tf- h . 

^ZtziiW&Z&mk-t SM<077'Jt-y 3 >£• 

<7)To-bxlifi?f T'J> >5\ 3&*o^N»*WC*6. Try 

a ><v%mm. z<r>T7v r-i/ a yimm,zm 
mrniz* hzt^mm^uiSiik. zcofsimizx. 

>Kx— rtctoT^lT^S. H»#gjgjcD2Xg 
7"D-feXli, *y h7-^±c7)j.— tV/TTU^-i/a 

[0016] *miiimt:%T7 0 y&Xf-t- 
h'X$:We b ■ 7^>h • 

iSTifc 1 ), dillc oT, i/XJ-A, -7KS-XM/- 
^**EfW-&!eS50*Sffl«as*(!S«L. **oxy Hx 



A. E0*>, y-f'X • *Xb£<Km-tZ>TV $-XbU 
->-a v ■ *r-^±.\zfttet&-?* : Jxyb . 3 y v- 

~y~—j^\i~7 b^—XbU—^ 3 y ■ -f—J-sCO ffyJT 

x-f>h^(>-7^jtyb • ??>(Tyhti>i* 

t^T-fx • -fcxbljW-fxt. 
>h • 7y47yhlzmm-& r^c^j ?<u9bV 
t traTSI2iEffifg5rffifflt- h ( 0« : yXfi» • 7 H * 
-Xhk- ?£tti*-y bV-? • 

^. h l/-i/*^5r 1 oo-9--A<?)^^jg§^§f^ 
fcOt. Z<r)XYV-i?mm:*~/ h 1 7-7±'\#WLZ 
itnh. S'Jcoif * L^mmmX'li. v*'J*yv ■ a 
yV-tU ■ 7o?y J±£m7 K S^X bU-is a > ■ 
yxh-tuitfiz. ZffT7^J^yv ■ ay 

yx-*yum2\,z5Ft. 

[0017] m2^mm 1 ^coiiM»@tcs^< a 

07D 7 ^it'*5. * y h7-m (@*B&) 
-^I3y7^ i |/-y 3 y200(l 2-?<?>te?y 
a>. HP*>, TKS-Xhl^-^ayfflJ^-r-fe^^g 
^2 0 2 1 . 4-9 YV-? ■ HP*,, -9--b'X • 

*X h im^F* 9 is 3 y 2 0 4 fc Sr^l, co fc ^ t 
flS. ^-t'xcoiSft, TTUv-->-3yco||fir^/ v :<± 

•y h7-^ ■ if-y\'2 0 6 / \<7)T f-tXHfflm*? H 

ryb ■ -?i/y±_<r)*-y bv—? ■ i> fjl— (f{±l32 

tC^$tLTV^V\ nyta-^ ■ *.y hv— ■7cr>x.y 
Kx— T y h <7-y-±<7)-9-- t'XM77 1> ^r->- 

3y$rM(c^<fiJffl^rtgt^0. d^t^^-b' 
XM77'J^-y 3 >'*«S^^'7yL^<^-D^ 
3>t*a-^ • 4 y !-7-;<0iyHa- ft±*^ 

T. *|gBB«i^f-A • 7b$-Xb\s-?£tM*>y 

[0018] *HtMtT<i, 7*y7 yh-^7^7 
y h 2 0 6 liWe b-t-y\*2 0 8 £il tX^WZtih . 

L^mmmx'tt, t-A 2 0 steEiioasco 

t-^ (S^zRfflW^rTKS^x hU-y 3 y • -y--yN- 

^rt') X'hht\ itcit^-y h7-^wxsyt- 

D#2>. V^tCHi-J:, 4 y h7-i?|Aic7)-9--/\-2 0 8 

{iv4y'p< yh-^7^7yh206 Z'fim-f&ikPfe 

y-*2os<ni^<?mwLt\,xis.. vxnzm 
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^tiv^y h • 3>y-;h OS: 
SjS^'W t>i\&. We bt-A'2 080^!^© 
t LXit. tr-fx • 7^yh • ^'jL-zMiHg* 
WSMX h l/-x'ISf-^"<-X2 1 2^07 
y-*X£^S£*W*>;h.S. We b^-/\'2 0 8« 

(LDAP) 214imtXxyu-^212tmmt 

• raVa^^--J<2 0 8m/XhU->mtii2 1 2 
^T'fiefflUfS. Jgtc, XbU-iSMm2 1 2ttv* 
^ V h- -9 y* T y V 2 0 6frt>(0T?-bXl)KiimX' 

hh. xmmmiza^x. *wixy\s-v2 1 2\±t 

-?£Pg/f 7*- Vy h X1&m-Z> fSffittcOJSV — "9 

^-xx-hh. wicottiL^msmmiz&^x . x-? 

SU^#£U^»fe»CJ;t Xhl/-^'212{i, 

Kt. webt-A'2 0 8«*txhi^- immft 
s 7? ^xtm^mmnfrnx y v-vmmfmx y 

[0019] minx d (C. *%m&yX7-J± ■ 7 Y 5 

Wxfy-iTyy ■ TY^-xyv-9 ■ 3yy-^2 
1 6£atT-tr-A2 0 8'vr?-fe.x-r£. 

T'te, 7K$-Xhly-;?#1^*2 0 8'VTy , -fe;vr 
t SrTOc-f&We b<-XCDy7^1f • 7*0/7 

a*. 3yy-/P2 1 6W0fix-cv^ o iOftiWit 
{J. ayy->V2 1 6li7*-/Vyh • nyy-yp • 7 

D^5A2 1 0SWH/-y||2 1 2*m$?&. 
fy*7*f ■ 2 1 6*><yi*:i^ t-A'2 0 8li 

h 2 0 6±<7)V7 h«7xT • TT'j7--^3 

«7-F • *X I- 2 1 6 im$X'% h . 
[0 0 20] 7^^yh • ?y4 7> H206<i*y 
h >7 - 7 ±C0£T co-tfw \*i 7t»iJgo*>co-9--v \'£ 

i/Xf A - 7HS-XM/-^>'WebD--A'2 
0 85riffit.T1^'t^^->'N'{i N LDAP£3ffitTXI- 
U- : J2 12tm(Et&. &-?* : J*yy • fy-iry 
Y 2 18 Ttk-T 1 -oa±<?)+)-- t'X t . Erv 2 2 

ox-vk-riivxtcottfo-f h~?*i;* yy ■ tioL-zu 

t Jrt-t'x ;Wh20 7±tWf & . JKr^-t 
yx I— /l^ 2tti&#<D-9--t'x£7y 

rrxs-Whn. i^Jtyy ■ a.-ivm&ii 
cco32ieii*^ h i^-^'2 1 2}h(r)nm-h^.y v >) 



fH'^MZtlh. 02T'(i. *T-\iX2 1 8SrV^^V 
• ; Eva-^2 2 0*^^LT*L-CV^^ £ 
ft£> 2o<03 ytf-*y Ki5VHC;£^^pr^T-i>S. 
&Wtl%:L>if. -^-h'X^^J^yh • 
tt. •V—txcoiMU. W*>. ®m : J*-;\st-ti4z 
&-&LX^&. L*>U 2-o(r>ayx—*yh\±y\/z<r) 
tmHS3£tLTVv6. ~7^J^yy • ^x'i-/P2 2 
Oltayy j^jLis-isay ■ 7 r 4 jumztmzti 
•5. 3^7 -f^raly-xay • ay#—*yy ■ r-flx 

v^yb • t^-;l'2 2 0rtOtf«(iSiI^ 

• 7T-1)l>£'&tST-?'<.-X&tMX? 

y-y—y t^v^v v%t'(Dffl<r>7 yx-mh 

*S&X'$>h. 

[0021] v^.^ y y ■ zxyv-iv ■ TufyMz 

wa-r & 0 2 o» 0 ?> 3 ^ >- h lifgaE&trr ^ 

yy-;u • ?u>fyM> 2 1 0{iJilT(cll8~E 1 1 (cm 

- j fwm&mzmtkt&miLiy<*2 2 2m-fh. y 
y ■ ?-y*7x.4 ■ <iy?-73,-x ■ 7n/7A, an 

*>. CGl7"Py'7A3553yy-^ -^Xh2 08tW 
jILTV^S. CGI7D/7A2 24 

tiTo^^Srn yy-;l- • *x y 2 0 st^mf-fh 

tlMZimZtl. ti*r>2-0<Fmt. W^. 7*y^>h 
• ayy-^CGI 2 2 6StX-9--yiy-y hCGI 2 2 
S'M&attfctfSflSft-avS. 7^yh - nyy- 
;PCG I 2 2 6«iv^^Vy h • ny-/-iv • 70/7 
A2 0 8tjifi^2,. ~?*i?xyy ■ ayy~/U 
CG I 2 2 6(iH9&tfHl Otc^LTOTcP^r 
h. t-71/7 hCG I 2 2 8(iI2aET-^5:3yy- 
;P • *X h 2 0 8*^^-^ • h 2 0 6^g^- 
6. M(C -t-yiy-y hCG I 2 2 8l±3f£88f#»'C 

[0022] -7*^ y y ■ ■ a y#-*y 

h2 2 0<r>^X'hhnmhi2MMfT?*LX ■ ay 

yti-tu ■ v^^2 3 oa*?-t*x • *x h 2 0 6±tc 

#^5. l2iEl^f-V2 3 0{iT-^S:3yy-;U- * 
Ah208Kt-7U-y hCG I 2 2 8£ffil:T§fI 
•f I). 7*y7>h • ziyy—iV ■ 7ayy&£ttfe<7) 

j r-t'x<7)>mi l zffin-r'^<u?*y-f&^XTA ■ r 
y s -x y u-fizfti-hmwftfceyy-t'xcTym 
WmftS-Z&m.-t&fMz^ zi\t>03ytf-*yyit 
mZtiZ. Stc, Ztih(OnyX-*yyi± r x-n 
-j yXfA • TY*-xyi<—!?tfTY$-Xy\s~ 
9b, -?*i/*yy ■ nyv-tv- y]y—AV-9P^cr> 

ftfcomm t immvmm'i c t mtmz^-h . * 

mmBBX'li. ZcD®tmtt®8 lz^t7y 7 •< • 
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b'X*XH20 6\iMMf-^ ■ X b \s-it2 1 2 £ 

SIM-*. 

[ 0 0 2 3 ] m 3 «*%BJ<0 1 OCDIOS^JS < £f 

iya-^—bli^t. Xf773 0 2tl±. 1T-t* 

a • Th'$^xM/-^^'c:ii^||S&ri,. t-h'xt 
v4 T> h±lzi> ) — /i^irc^sHfif"!^^ 
y b • ty*-/wo«k LT<±. i iy hjl— 0 
m^^t^^-ndfimr^tit. mwmt txa. m 

gcOWeb^M bZ^XbTt I SP (4y?-*-yb 

[ 0 0 2 4 ] y h • ty^HHiiiiA^S 

v^yh • ^A-;l^)?*><9loT'2>9f#6. * 

mttxa. y^ij^-xw^isxyy ■ tya- 

■ ?4y ■ -?*isxyb ■ zL—)Vifmf hfih . 7 
5Wi—xm*ifxyh ■ ty'a-yniweb^ 

77'J T-i/ 3 >'toa^<7)^* J We b 75«5Mf ftX'SI 

tT£ft67ry^-^ 3 yT'j>.&.rfc£^g-c£6. x 

^-Xc^v^^Vh • ^3.— Mi.. UN I X^l/ 
-f^ yy isXr-^coaytf— *ybX$>Z>xyab 

^Mzm-J^xmftztihxfyvTay - Try*— 
7V-?-i/ 3 yit-f7'jy : ftfrt,mfT2tihztte% 

S. <Ifl(iUN I X^-XO:/?? -f A/P • i— f • -f 

y?-7x.-xx'$>6 mfs\<r>x fyy-bxvjyb'J 
Xiz&mi-z. avyH ^-fy ^^yh ty 
j.-Mt-3-?yV ■ yJyZm^XWg.-t&TTV-y-- 
ysyizffi&LX^Z. W^U 3-7yK-7-fy-7 
^yh ■ ^i-Z^JlAbS^, A>o<I:ft.£Web 

ft-f&Xolzyyf-i A • M-^^-^jSriPrLT^Tt^ 



avyH • y • avyK^tLTti. Hsj ( 7 
t4 )l>?>VXb ZW^-fZ) . r whoaaij (S£tf>.3.- 
1f(crof-|»tB?g^)I-r ) 2itX r P s j *-^y;a. 

[0025] Xff 7*30 4T'UL «fi-7F$- 
XM/-^llt-t'XSi;?^Wyh - 

■?^yh- ^7^ryh±^\fiii-r6. ^msmm 

X'it. Bc.regt^iitlt^yV^^S/^yb ■ 7? 
4 7yb±.xmfrrtZtlz£^x. Z<Dg&\ifrfrtL 

t. v- txRx/-?* y b ■ ^is^-ivz^m-h 

ZtiZi. 0 „ A yx b-lVZIxtz^iS 3.—>V<7)WfrfrT 
b^-Xb Is— is a y ■ If-/* ( 02C91T-A2 0 8 ) 
/ viKn?ix£. — iRWt. yXfA - Tb^-Xbb— 

^ \mofr<rmtt*r- tx zmwmzh v*^** > 

b ■ f^JTyb^mth. ftoT. Xf77302 

?4 TybJzcomotiHryy—t'xizttLxfcmLxmm 

fcft. v^yVyh - f-^^WSay^yh 
• 3y7^iy-y 3 y - ?T4>vtmztih'mfe<r> 
yrJMWf&Zti. fr-z>+r—\ix *xb±.<r>ayx 
-*yb • ayy 4*?3.b—i/By ■ f-tU^bO^ 
trnZtlh. XxvT3O4^04(cS-^V^TljlTtC» 

[00 26] Xf-y T3 0 6T«i, r^^x^N'-j ;U 

-fyjv^y^yh - 3yy-;i-7D/7A2 l o 

mtXfflti;-f&tti>(,z^ zcd rfu*A'-j >v-^- 
y£-f-t'x ■ *x blx-mf-fh. Z(r»v-i~y\i.~? 
*is*yb ■ ayy-;p ■ ro^Atcts^^- 

^ • *xb£tziiV—t'x ■ ftXbW\T7-tXL. 
r>m^ Z izmiZixX If *t ipi f-x >y ^ t~ S^-* . 

h2 1 65ratr-?^-^yh • ayy-^4i.s. 

^■t^-h'x • *xb±_coziyx-*yb ■ ayy-i*? 

jl1/-^3 V • r-f b^ h l» t Wfili.^COT'f I/? 

hDSrv^^yh ■ 3yy-Mf I7 ^«c:t(: 
i-»T. ZtUifrhtih. Xf-/T3 0 6{i@5(c:tJ^ 

f- y73 0 2T'-f yx 1 — ;l/$^^ttJV^T, T < 
Xij^~ ■ /u-j-y£y—t'x ■ *x blX'u-^jMz 
miXZh. y-t'x ■ TfcxMi, Z<7)V^-b ■ th 
X^A-. EP*>. *-b ■ tt4 X#s<-cr>&$:Z-?*i; 
xyb ■ ayy-iu- 7ayyis'\-?rmmU%h. * 
mSto&mX'ii^ WfA • 7 b 5 -X b V— ^*^5g, 
7 -y 7"^ U- - K i li iUu & iSaffff o it h'X 
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■ ayy-ju- 7o^7A^l 
#£. *HWB!BT1i, 7^y^yh • ayy->\, . y 

®liL*:&. xyh-j.-Hf«if-h*X. HP*> X TTU7 

i o o 2 7 ] ma \z*m\<r> i ^<mmmmizm^ < -9- 

- t'X £^|§-r & 0 3 cOXx 7/3 0 4 <?5Sf*ffl^^-r y 
Q-f-A— Xf7 73 04liyXfA- 7F 

T^S. XT--/7*4 0 2T'ti. 1>--b'X. Bn*>. T7'J 

BuE^ipt. *HJg^®T'«i, -9--b*x(i3oco 
EU*>. 77*7tX-X. X\-XSJ/37>H- 

T'<±. S(^1^®S^-b'x2rA*LflS. *HSIJg 
.^T-ti . C: 7 7{±-f- b'X - jfc* h±T'HSS$n 
ZLX. -OXx77ttT7'J7-i'3yc9gS£ 
v*^';* y h ■ a yv-^mtoth 1 Kryfimt 

*XMC^T ASSET'S) £. Xf774 0 2^. 

-9--b'x • *xhX'Ai)i-Mmi$. mwiztifz-r-t- 

X(rmmzM'3\\X\^h „ t-t'XWe b<-X£7)-9- 
-t'XtliS^. 7O-f-^-h{jXx-yT4 04'V 
Wtth. Xy-yTAOAX^ yXfA-7K5^ 
b'X ■ *Xb±fc#ft^-S-9--t'Xco-? 
*iS>(yb ■ *>-'jt.-yK7)o^--^ 3 y^A^J-tS. W 
e b^-XcW-b';^i§^ ^07—^3 y«3-j& 
A ■ 'JV-X • Dy"-^, fijl^ URL 
cV&mZZc-t. X-r y74 0 6T12» ^-b'XCOSSI 
-?*>-'*yh • ty'a-;KOURLt$:t-t'X - 

•tS. *^J£Jg©T-Ji, ztiL>2-z>cr>a ytf-*y ht 
mitihrnsT^y-Mi. ztyx-*y\. ■ ayy ^ 
j-U-isay- f-fWb'JW^fV^hUrt 
<r>ziyx-^y h • 3y7-fdr A l/-^ 3 y ■ 7 7-^ 
tWWUN I X7W^'\gff£fi&, > B'J<0£M L 

^•9--bx - *x h±co«i|cT)X'f h- 'J *imL% 

h. 

[0028] Xr- yy'4 08T'(i. ziyx-^ybmM 
T-Sr-9"-b'X • v^y'^yh ■ ^^-^ic^fx*, 2 



T'<i. 3ytf-*ybI^m22o<7)g?7h BP^. 
( 1 ) HRrfSB'J? (V^'jx y?77— (0g:SUNW 
FTP) &£) RX/ (2) '<~iS a y&^frt>%:&. fto 

*yni ^yx-^yhmxmmvmx^ti. in 

zty#-*yh - ?yy jifj.u—^sy ■ TjUfh 

t jft<7)yTj/u'\uifzti&. mz. y—txizmtz 
{j--?y i/yh-'j-j xh-th ( zm&z 

X\ z\<r>&m\im%<D&\W^Mtc%mX'hh) . zco 

-thVyy-i • j--if • -i y?-y ^-x±izm^ 
ZtlhZmX'hh. X7--/74 2 0-CI2. Xf774 0 
6ayXx yT4 0 8TIKHBL^x-^, ED^. 
—%y Y*nyx-^y\~ ■ ayy 4 ^v-y 3 y ■ 

Ti v?vvn<mwj:yT4)vn'^m-h. m-> 

T. Xx-y7'4 2 0c0^ We b^-XW-b'X<0^; 
«)COH3<7)X-f 773 06 ( r-^^x*y\*'J j7a-fe 

x) ^^-rs^t^^-ccofflffiti, jg^x-f 

[0029] fftfXf- y7"4 0 2^9. -^-b'XiOa 
^'X^-x^-bXT-fc*^. 3yhn-;Hix 
f 774 1 O^ft-TS. HiliecOidt. X^-X<7)+>- 
-b'x(i, u N I x^^.u-'r 4 yy ■ isX^rAcoa y 

-•K-^-y bx'bz, x7o h ^Mzm-J^xmffeii&x 

9y VTuy ■ ttv >lz--mffilzm&LX^ 
h. Xf 774 1 OT'll y^f A • T H 5 —X h V— 
fliXK-xcoTTV 3 y^m/tii-ttiibizti^ 
%'*xt:XJ}~$'&. Xr-;74 1 2-Cfct X^-x<?5T 

7U r-y a y^mfta-ttitbiz^ un i xa- <?rx/ 

i-if • ^-7$rA7J-T-S. <J:v^T\ ay hu-;Ui 
XT-y74 0 8 / \#fi : -t£.. Xf774 08tll 3y 

--K-^-y h^Ji 1 £j*x^ jL-^&mfy/v-yKZti 

?tl'm t )%X&. Xy- y74 2 0T'Ji:. 3y<1?-*yh 

^ffli3y.-K-*yh - 3y7^ai/-y 3 y - ^ 
[0030] 37yn • y • ^-f7i0v^.^yh 

• ty'a-JW%, 774 1 4fc^-rJ:5t. 
XxA • TKS-XM/-^(iX<-Xc7)-7^.^yh 

3?y f • yjr^yaj-TJt^yN'xt , un i xt 
7 'J 7- >-3 yzmfStfriztbiZ'gmiXin i x^-nf 

S^y-yU-7<7)^fftl:A7J-n>. Xf774 1 6T' 
Ji. yXfA ■ TKS-Xhlx-^Ji^y^-YA • y\'5 
^-^^'3vyKrtt#iSE^-s^5*^^^ (37 
yK • vA y • ^w/co-^^-^yh ■ ^i?2--)V^L 
WZtil) . ztihw^y^-fte-y—t'xtfmiiZti 
tzm&X'Al)Zti&cr)X'li%< . xyKa-t>'n7y 
K5r$ff L^^.T'A^$ix&. /77 -f • a.-- f 
■ A y?-y s.-xteJ.yYs.-ifftyy? 4 a ■ ^ 



<^M. BH*>. ^X^-T^X^fvO^. 5y;MA- 
— ^te-Iix^Srv^i^yh - ayy—w^yy 4 # 

^S*>5*»fc(i*ira«fc: x 3-?yK • yj y • 

8^ff-TS. Xf7T4 0 8T1l X^-Xtf)"?*^* 

t^A-^Tfi^fceUHafc:. rjy;tf-*yh^p 
fc^T^T-^SWliiTS. <X^~C. XT774 2 0 

- ay*-*yb • t4 l^? I- yrtlcB»$*it^47 

r^yx-^yhmiFF-^-iSsy^j coy*--? 

-T&x -f h y rtta^^iiTv^s 3 y*-*y b<7) 
t£&oi&££. raytf-^yhiBiij^-A-i/g 
y#^j <07*-v-y HiCm-t^. siJ<o#£ Lv^HJfe 
BmX'\i^ l~Wzi-?y\nz-??Li-3cr>yT'(>l'£m.W 

tzm<r>7*~-?s b m -. zyx-^yhmsvtf—?-? 
h. 

i o o 3 1 ] m 5 i ocoh5£jb®^^< m 

-t'X<7>£Tc7r?*i;y<yb • ^^jL-^-ttsmn^ 
cozytf—^yh ■ V7 Wi7 • -brxybZ^ V— 
t'x- frxblZ^-fh. ay#-*yb ■ ay?**?*. 
U~is 3 y ■ if 4 U7h t JliZ<r)*7'j<yhMz1f&f 

$7^y7y^ • r?yy-;P- 7v7yJ*fci>lsttLZ, 

9 ■ *L7*yY*, -tf-h'x • tfXMiWtS. 

f£. mc.regrJvy Kt, XK~X<7)-?^^yb ■ To 

yyARVa-?y \t ■ yjy. v^yh • 7*D^7 

ASry^-hT-Uff-f^^oru^AT**)^ I SP 
y^-h • =J-Kfc<i, v^yh • nyy 

-^&tf-?-b'x - KxVCM-filzl&E-th. £tc&& 
ZtlX^Z^^i/jyh ■ ^iSjL-fWr-t'A • * 

^Mway^-^yh • V7h^xT • -fc^y h£ 
7*y'/yb • nyy— /u- yu—^y—y ■ -ty^y 

hft<nvy ^TZtmLxmm hT ■< x*>v) ■ 

[0032] Xf-y7 , 502?fcL i/Xy-J* ■ T H S — 



(fl 1) )0 0-2 1 5 168 (P20 0 0-2 1*8 

7>7lF • -foXY tcnfyy 4 ij)V- J.~ if • jy?— y 

*-x$mtxftfet&. *mmmxmi-rz> 7 yy 

. J-—? ■ 4y?~yx.-xcomii. 06. 07 
i)*ryy—vxzzix?ix%th§,®Lm-vx ■ *x b 

&. — Tb'S-xbu-fiigosszmtMm 

M2tit:-r-\zx$:-£ts£XW-t'x ■ *xh£g|iR 
U friZtLt>£X?>-9—t'X ■ ^Xb^yy^-f ■ 
Xbfrt>— &(Z7Jlt6. Xf77504T'li, 3^ 

-*yb ■ ayy <*r*u~is a y ■ 7r-f/i'HftT 
i3»«0r 4 \y? b y SrX^f^y~rs^i6t. -?*iSjt y 
b ■ oyv-tv ■ *X HiXf- yT 5 0 2T'!85g$iU: 
loja±0-9--h'X • ^Xh^g^-rs. *^SS^®T' 
WL ^O^SlcOT-f l^^MJttny^-^y h • rjy? 
^al/-y 3 y • r-f l^^hyX'^S. WebK—X 

Kffifflsn, ti^msmmx'ii^htitzx^yy 

X) To^ix^JitT. 7*y7yh - nyy-;Ki 

(±. 7K5-^M/-y 3 y- -9--M>'We b<-X<0 

cOXdf-vyny^invyH • ^ y . To^ASrffi 

U37yKi*7 h«7-? • 3^^^ 3 y^®tTMfl 
L. *»oi£0rjvyH2rrXx-f yaV-f- y\*_h 

t^t$*«». j: *)M#&)izit^ xmsmmx-te. 

i/*yb ■ rjyy— /^fffeonvy K^^-x hv— ^ 
• 3^y 3 ySrStT-^-h'X • ^XhiTUff-T 

T-ohn^fi^tTffipill,. m.->x. Xdf+y-y 
y'tf. ny^-^yh • oyy 4^^.U-^ a y ■ y r 
■itvmxbumtht^z. unix *vxb ■ y 
t4)Vs a~?ybT$>&\sZziytf-*yb ■ ayy 4 
JfxU-^ 3 y • 7 4 Wy-MJrtT-Hfirrs. v^^v 
yh • 3yy-;KcS^-rs^«o$>S7T>f^oyx 
Mir H$— xh u-y 3 y ■ ^-J^m^tih . 
[00 33] Xr y7*5 0 6fti, 7*y^>h • ny 
y-;HiXx vT5 0 2X-ttfeZtifz£X<r)->r-h'X ■ 
*xh±T' r ao*>o7tj 7r-f;u^yxhS-|S^|,. 
iJ:v^T\ z\tih<r>yr4)Vco^m^*) b^j-y-fhtzih 
(c. 7*y^yh • ryy-MW-tx • ^xhw 

m>mizi*7i,?y$:\mth. ^msmmx^i. # 

7r^/^rt^S:'J h 0-y^htzMz^ UNIX f M 
Jgj 37yFT'J>&cat?:^-t*X • *XMTW 

a. )iwsLi«ST'(i. s'jcD^b-T 4 yy 

■ yx"fl±n<r>y 7 A JUcr>ft®£ 0 b ') ~y-^htz^ 
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rtg£-9--t'X • *x h*>£> V h V-7Uc®. T H 5 
^H/-/a> • y-s*±<o-?*i;x y h r» y y- 
Me J: 0 , #7 r /l^rtgfcjf »?)X * y H • /\- 

/Hi777hASCI I7r'f/1'T&£>. 7r-f;K0rt 
g£y\- 6 ^ t i 0 . 7 r 4 /KOx—F 7 k 
y K V -&£f?L a y y h m<fr RVtixoa •? y 
H-ima-^a yffi&tf&y r 4 mz-o\ \x itg'J 
$*t£. xmtmmxn. a^^-tj:^ ny*- 

*yh • nyyj JfiU-^gy ■ r-f W^hUrt-^ft 
[00 34] Xf77508tll 3y^-*yb • 3 

y7^ik-xay'7T^ ^^--jy^LtiT 

ny.-K-^y-h • r?y7 -r^fxU-i/g y • 7r4Mi 
ft®? fx «r^!&^-|, fctfrtc^^TcOffi fg£ 

JxMfiV-t'x ■ *xbtffix-?tlT?-txx*2,*M 

-?<-xftizfatoZtiT^zir-t'xc7)~?*i;* y h 
^y-h • 3yy-/i-£ffitTWC-#&. *f£l6J$g 

• 3^y-w«7?f<m**, *Hxhi— >/± 
Or—fUmZti, toy 4 h»7x-f b- • -T* h'J 

• T?-feX • 7Dh3;KLDAP) £iItTT:?-tX 

[ 0 0 3 5 ] m 6 7 te*fSBflo 1 o<?^S0®(C 

i-lf . 4 y^-7jr-^x?ij-y • FT'#> 
II 6 (i r-9--t'x<0Sfiij x— f ■ y^-7x- 
^»?ij-y.yg 7 htj!)| l . ^yF-760 
2tef-=*Xh xyhtl -y-y^-f yK76042:W-f 
h. y^fA- 7* KSxxhU- :?A*fJI£gx/CU.5 
■y-t'xSrWTS-t-t'x • *Xhco£ffi#r=*Xh • 
xyhy • -fyVM yH >76 0 4^A?j$ftS. *HSfc 
^?gr<i. liW-h'x ■ *xh£A;frt&Jti&?>fg 

-■^i-hv-h'x ■ itxw&mzx-ftX'ih^xb ■ 
xy^y ■ ■v?'? 4 y V? 6 0 6tf% blZTfiZtiXK'* 

^ b±x"g®t&mmzm-2tix \zx<?> >j x 



M'JMJ -T*** fcftfc* x-if «^ y 6 0 8 £ ? 
y * ?L»*. £l§£BH&T'#6-9--tx • *xh±ct) 
th- trxo y x h Sr y h y s^tc, r h 5 ~x 

bl>-9\±X9y6 1 0£«nFL*#S. 
[ 0 0 3 6 ] mi\t r-^-t'xcoSHj x--f • y? 
-7x-x<?DSiJ<o-fe^yh5r^-fx^y-y • >- 3 x 
bXbh. isXTJ* • T KSxxbU-^^^i-tsa 

U-^^'StR-rS-tSr. ClcO/77-f^ x— f • 
-fy^-7x-XJiBrigt^S. x-if«||Sft4-2ilXT 
^-bx nyfn-;KiJaT(cB^S. -9--t'xoy 
Xh6 12»i'7-fyH'76 14fc^$it-CV^. 'JX 
h6 1 2<iT-^"<.-XrttlStt$^TV>Sx— 
•fi>T-^ti3RL. * 1 o06O7-f-;l^K6O4A.A 
*$^l7t-9--t'X ■ *X K±<0fllfflTirig^-9--h'X$r# 
ts. i/X7-& ■ T Y 5 xx h 

T^-fexsrst/^-t'xsr^-rs. xmstimxii. 
ztM-q-y ■ -*-x (mm -9--h*x6 1 6%n<r)*r 
-t'x&nfemt.z&wt&EfiiX'TKi: y--£x£mm 
uz®. x— m ^mi^-h'xcosmj 1 
8*?oym. *mmBX'i±. ztmwxttz 

1^7?; • X—tUb H<r)iM yy-^yy ■ =f)^ x£ 
WQLxfthti^ i>^^4yvvm*kfoX'4yj'v*y 
vztih. mmtL\mmmx'\t. zvimt. a 
Tizmcox? v-yizm&Lxmm-iimk ^atj-t 

•SfcaMc, fS^r^x h<-x^o-f y^-7x-7i 
^JiStg^t^^igiK-xcT)^ y?-7x-x&t- 
OlP/77-j^-a-f • ^y^-7x-X5:jsMT- 

[0037] Mi<r>X 0 (c. *^B3^v* i/^< y h • rj 
yy-/P • 7P7"7A<i s We b<-XO#fjt*-y N7 
-^rtOHSt<?3-9--h'x • ^Xhi^-h'XSr-g^-t 
htzibco-by b yiv ■ 7*^yh • nyy-^tt 
SClfcfcJ: ->T^$r%»t-Sx— ftm&VT 7-bX 

• ny ho-^co r^y^p . y-j y^yj ^rS^ 

tf. S^T'ti. We b<-Xff)^-y b7-?X'li. W. 
StW-h'x • *Xh±-CfiJffl^rtg^-h'X5r«H#-r 
S«S5rW-tS^Xf A • TF$xxM^-^<i. 7H 
$xxhU-^ • ?Ufy^H:7l < i-XM/-^ 
* 5 °^yt i.#-?-t'X ■ *x h(c«LTSI2IEL. 

$xx h U-^{i|giE<7)^:i6tc^fflT'# &m-<OJ-xy\' 

— ttv- r-ffyf-f f--f Sr^rLTv^^/c^), c:/x(i 

Vmxf>&. ZZX\ ISKtti. x— 

x '*xb<vm£¥fzti&m. xmmzii. nm<o 

•^-fx • •fcxy±.<r>*r-\ix$:W£th*'<.\s-i'3 

>*mfct&ffii,z^ ^—f^ufy^^r^Mfmmn 

t . x— !f*J-9--t'x • *X h±T1r3 C t 

xu&zt tfm'hh<ofrtizmz>--W(.uzf!!tm£* 
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I 0 0 3 8 ] 7y *7<f • *X h*^Hte-ri.-9--fX • 

a.-- f - ■ w xmimmizi- 
*vk sin?. ^"f-^2 2 2Sr^rfs. cioaisft-^w 

■i-Yii^Jy -f y-v 3 y(7)JtWCT-^"<.-x2 l 2 

x ■ *x h 2 o ei&nm-twims-vj^. bp*>. 

I2IEl<"f-\'2 3 0'V£j§-fS. yXfA'7Ki-Xh 
< . Cl«0ff|g(i5aS$ix. *»o*<o-9--b*x • *x 

[0039] «o-— nzm-tmsLteT—r^-x 2 1 

^yt^'J y tA 3*utfS£- % zcoffimiZCG 1 y 
t-j fihtiz,. j.—wzy'yWzmtxu^JKyb 

■ ayy-^—jgay^y (g|]*> x %mmf'*xv~ 

[ 0 0 4 0 ] a 8 1 ^<vmmm<zm^ < 

^i/tyh ■ ayy— >v- 7n/5A^a- ?<r>T7-t 
xay hn-frsx/muzmthyy yitiiV- jl- 

■tzmmtt-tz,. m^rb^-xbP-^Rx/mr 
$ -x bu-?tf<m£mtiz>y--\LX t s-a^-t* 

fc#>fc. Z\cr>^ < yVWmmZtlZ. TV^-XbU 
-^fcA^S/yfrW/^-f yK>7704i:. 
"7- K £ ^ti^ftA^StmA^S fctfxO'/- ^K-) 
7 0 6S^"7 -f > W 7 0 8 fc#<<7 j y F-77 0 2 ftiZ 
Wf^tiX^h. *7jy\ i <>7O20)Tm&%lZ®S$- 
hWvTf*j 4 y Y*Jl 1 Oti. IfT*^ 4 :xK r >7 04 
^A* U:7 H 5 -X hU-ftfW&ZffZti&V-t: 
xcoyxhZSts. ~?*-*Jyy- THS-xM/- 
7 . eh*> , r x-; n- j r H 5 -x v v-9if*r- tx 

[0041] H9syni oizxmmimmfeBB 



-ftfyyV-f ■ *X h (HP*>» H2^7-H5^XM/- 
y 3 y • nyy-;i,2 16) ^rv^yh • ayy- 
)V ■ -fox hcour L^-f yf y^-TS ^ t frt>ttt£ 
I. %->X. xf -/rs02X'\t. o.-if{i3yy-/P 

^v^yh • ayy-frcOURUiVfebK-XCO*", 

b v-rftiz&Vlx? y y- K u r L^®^^-t. 

[0042] Xf y7-8 0 4-C<i. TKS^XhP-^ 
/jL-nfjinyy— iv ■ *xh±cov^Vyh • ny 

V— )V • y'a7 , yA.'\T7-tX-?hfz#)<7)3-—f£,Mf 
'W7-Yi9$Ztli. Xf7 78 0 6tll 
^ y h a yy-Mixf T8 0 4 TA^) 

X-r-y T<iHl 1 THtcPSBtc^-r. a.— FrtM-fS 
«S5r#-5-$ti.7tia60«l«6 1 2(c^-rss?$njt-9- 
-b'x • *xM«t-t'xj, 7^^>h • nyy 
-Mif~^'<.-X2 1 2rtcox-^^^<.S^ttJ: 

■ ayv-tu ■ -trxybimai-hzttzxixfth 

ti& . ^mw&mxii N 7KS-XM/-^ OffiEBtf^- 
{i. TK5^XM/-^*«^np$itTV^-9--b'X 

h ■ 3yy-;HiTKS^xM/-^Ail^|^5nT 
^•&#^-b'xai/*X.h<0URL5r^-r^„ Z<0T 

xj-tx\tm 1 1 (cs-^'v ^xariztrntz . ths-x 

M^-^A«T^^»#-9--b'X • *XhStf1?--b'x 
OfiS5-3yy-^- ^XhA^^jh^dtSr. UR 

[004 3] Xf77808tli, J--if* {< i : a^a^ 
T'V^-t-b'X V—t'X ■ *Xhfrt>C?ffife<?> 

y—t'x) <r>Ayx?yx*3.—¥\±wik$h. tf-b' 

ta!-5T. ^-^\tt-\LX<n4yx9yx*i&lzjm- 
t'x • *x h*»^a»!-t&iM!3&«&«. jl— f ■ 7l^y 
H 'J -=SpfeU i 1 1 J: 0 . jl— f (ixf y T 
8 0 6 Xft-L>itfzW&<r> URL<T)5 *>?)gSiR 1 o 
2:^5. Xf778 1 0T-(±. v^>h • nyy 
-)V i^XY\tQ.Q\ayf-yv ,YCG\ ziyx—* 

yyzmhth. ^mtmrnx-a. 

*x h 2 0 8 5rii-rc: fc =5r< -t- b'x - h±<y)-»f- 
b*xoi^^a^4i-iPtc^l,^iJ^|!6Jgah L 
ZffXVy 3 yiir>r-y ly yhCG I 2 2 

4* ! -T-t*x • *x h^n^^ y 3 y^m^-thmtz 
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TfcX-fAXL. frO02<D7*7<7-f • *Xr-21 6rt> 
£>1)--t*X • *x Yhn+f-MX^Tt-bXt SftbO 

fc. ^xw^y r- • v^ya^^-fx • *x >• jt^ 

-t'X^iKg7:?-feX£se**#£,. £co*:tf>. jl— f ■ 

-X2 1 2rt(clStt$iiTV^jL— f • T-?fcJtf£t 

[0044] Xf 7/8 1 2T1i. JL— f- ?l/f^ 
-WP£ jL-^ftfJg L^jcf+r- t'X ■ ^Xh^GMtltc 

mmmxn. u--t*x ■ *xh&T-?£%mi>tz 

fiL if— fx • tfXMl^r-^T-^-XrV) 

S. £^W2H{±JL— •r>f><^A£Stt6£fc&<fi ; 
itfiS t t Uc. jl— tr^U—fx • *x h^iUgD^ 

xh<7)f2aEStXT^-feX : • dbyhn-^- U-f-^Ojfini 
ZM.**i:^cit$:&mtZ>t:MzmfeZti&. 

-xizm-z^cD^ju yftrnm-hztizi:*). •? 
*i/*>b ■ ayy-Mi*>y r-v-^ftyw-t'xo 

££%'gm£mEX'Z 3 . BfgaE^Xf- >y 78 1 4 X'fo 
V)l*zi*r&. */78 1 6 t^J: •? (c, 3>"/-/P 
• *X h±(07*y7Vh - ayy— fl, • TWfyJx 

a. ^-v'tfrnftZixfcv-vxizm-z^^i/tyh 
■ x^u-isa yzyyWfr^mm-zztz^miz 

j£«jL=5:A>o*:i§-£ N JL-ifti8jK Zixtz-V- fx Sr ® 
mffL&ZtlzKb. 

[0 04 5] 01 Hm9<7)X7- yT8 0 6<?)¥m£^ 
-?7u-T-\-\-X'hl>. ^f778 0 6m jl— f 
£BKU jl— r*<7?f x^£l^£ft-5-$tut-9-- 
fX£&£U Cl^^tf-h'XCOURL^-efL-riif^ 
j£-f£. xf779 0 2tli> ?^y>yh • nyy- 
;u ■ *xHiJ-— !fKW^StPfi£T-?^-xa>£>'j 

Mj-yf&dtt^DJL— Ffcasaw-s. c<?)f»$B« 

jl— ♦r'£&tp\-x<7- H*»4,^r4. JL-^2SKfy?x'7 

-Hfcu7r-f Lfc», jl— fttmm-tmmztts- 

$iXtc-^-t'X<OVXbimtht^. Xf yT904X' 
it. ayy-i\,- 7fcxMiXfy79 0 2XK*J 7 tA 
^ixtz^-f ■ ? Uf yi'-Wl^ffll-vtCG I 7077 
i^v+W y h • 3>V-;|/ • -t^ y h 2 2 6 SrUH 
Sfrf 6. MIEOJ: ^(c. cn«i-»f-t*x • ^xhizitt 
6 'J y ? £ fiSi-T & iKI^X -r ••/ 7T'$> S . 



[ 0 0 4 6 ] C G I tfOSOcon yjjf-^yMit-h'^ • 
*x r-trJt-f ^ 3 >lrBli:-tl>3t«>{c<sW3f & 
^-yix yhCGI (02*074 tA2 24 ) -£**>!>. 
x-r y 7*9 0 jl— !f**Sa^S«IIS5r#-5-$^ 
TV>&lr-fx<oyxr-£®#tsfctf>K, v*i^y 
h- • 3yy-;pcGi{i@2<0r-^-X2 l 2Z& 
Sfc-tl). Ciix^if— b*x^<oi»y^(iUXh±<7)^ 
T<W- t'X^cO U R LO»»T#jSS ftS . Jl— f % 

t. w?-vt. ukiv m : x-y\-- • xx-fA • 

tfs-xm^-^) t, jl— rmmftztix^h 

■f-h'xco VXht 5-^tftS$g^^rti,#jL-ifcoxy 

hVZT—fK-Xte&ts. X-M-- • xXfA • 7 K 

$-Xhl^-^Ji^Tc7)1?--fx$:'gaL v 

— tf (0i : ^*jl-7 ■ v-XxA • 7K5-X hb-^) 

If- t'x<7) ijxh b*X<7) U R LOffcb 0 (c-tf- h' 
xo r a — f7Uyh-y-j ^fTS-t-tr (do=femr»i 
r-^"<-xtct>^^|,) . &ivc\ 3yhn-/Hi 

i9mf7r806Mi9, jl— m&tttpmzm 

tsV- b'x b'x xhip e>MtRt h . 
[004 7]*^|i3yta-^ • isXr&mztm 
ZtitZT-?£mithM«%:3>t'3.-?lzJ:~?xm 

mzmt-t&mfct-ktt mt. mmftizmszzti 

. -&mz. &-fH>i8mX'%:^-t)K Ztit><r)& 

5. KSfifS*t6tW«4^|ft (producing), f^ij (identi 
fying) , Ml (running) „ (determining) „ Jt 
^ (comparing) . Hff (executing) % ^yo-f^ 
(downloading) ^TtJi^Jli (detecting) 3?c9ffl|§ 

[0048] mz, *mi\tfm<?%m*mfthtz#> 

■ *XK2 1 6St/v^>-Vyh • rjyy- 
;p • *x h 2 0 8*cH<7)-t'Wx^ >>x^r&£t:i$mw 

SKTIST**. ^)t. v-xf-^iillfflnyh-i-^t-t 

imwmzHF®£tziiWLfe2ti& . iiffseois^rD-b 

xJi^jgo r? y h' a - ? * ^(iflficT) nyta-f^y/ 

aaetfflff^toTU'flrv^ mz. -^mmm^mk^ 

(c3So'v ^T,!iliO$ Ji/c 7W5 A ^riafflrJ y fa 
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[oo49]0i 2i£*:3gHB<7) i ^amm&mzm^< 

0«07"n-y^ST'ftS. t2E&tfT:/'-fex • aybu- 
)V ■ U4 J r$:$tj-?*> f *yh ■ nyy—)\, ■ 70/7 
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1 TITLE OF 



INVENTION 



Authenticate 



on a o d Ac c ess Centre! Ir a Eaoagcnec: C 5 1 r i- " e Frtf :s 



nag i ng S e 7 r i 



ccs i n a Ccmpur e r Network 



2 CLAIMS 



I. A method cf securing access tc the idnic : s*. :a: ice cl a a! -fa!::* *A i 
i s t i n c t services residing c c c a e c r isc i c service t c s : centners • : gi n 
administration server ccnpeter connected tu tie cse or rn c re service :cs: 
ccmpoters, there being a service meager reside* cc :hc « ii \ n I ? t n : : ss 
server computet, tbe method comprising: 
providing a selected iser ideetifier acd a corresponding private tcyrc 
r d , the user identifier b e i n i arranged I c I d c c t : f y s user e a * i n p a £ n» : n i s 
tratire access tc it least cue c f the distinct services; 

id then X) eating :t he aser by comparing tbe sc ice tec user i z c n*. i I i e : an: 
the corresponding private keyword a j> a i r. s i a p ! c r a \ i 1 y of r s c ? : : c r. t i f i t : 
S and private keywords stored in a persistent storage area, the c cc? a r 1 n 
g performed node! control of tfce service manager; 

deriving a list c ( services t c which the i s c r i < < c c i a t e d * t \ -fee u s e r 
identifier has adcinislrattve access; 

when a request is nade to a dm; n i s t er ^a scHeclcc g t e of the services : 5 
tbe derived list of s c r r i c e s . v e T i f y i i g at I h t s e ■ f i c e lest •: c m 5 o t c : 2 
s s c c i a t e d with the selected service that the user a s s c c i a ! e ri w i [ fc : b < b c 
lected user identifier is permitted to access the selected ser?icf bj ei 
amining access ccntrcl data associated viih the selected iscr identifier 
in the persistent storage area: and 
transferring cne oi Ecre management files cn the service Us- ccitpue: 
to the administration server thereby facilitating m i a i p i* '. t \ : o fi . c f '.he a: 
aoagemenl files otiliziag ihc service manager. 
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2 . A me t h c c as recite: in c 1 1 i b: 1 c r c i r i h r a sir i r. : s : : ; : : i r. s ■ : • * ■ • r f- 
iter is ccfloecttd tc an ad mi n i 5 : ra t i cr. c'iert ccapeie; f l : • h ^ f i< : 

in; a brevser pregfar. and wherein the seecie: c 5 e r iccc::l:ir t?.: : * : 
crrespondiig private leFwcrd are provided eve: * estsaic n: c a : i f.i s fr :•-.[..- r ; 
on between the a dm i n i s t r a 1 ; c n c I i e e t c c m p c \ e r 3 o s 1 h e a : n : : I s : f n : ' r. :■ c : 
ver cctnpit e r t the common i ca t i cts ccnncctfno? arr.cng the a:mi r : f 1 rs : : se 
r v e r c cup a t e r , the a dm i 0 i s t r a t i c n client ccaipirer anr : 3 r c r « f. r pt r f 5 c 
rvice host computers etiliiicg an internet prcrocci. 

3. A method as recited in claiic I wherein pre? : din? z se cce: esc? ifes 
tifier and a tor Jesponding private keyword fcrtber comprises ! :GgGi:£ rn 
to the service manager through the administratis client ccmncter. 

4. A nethod as recited in claim 1 wherein a b t h e 0 1 ! c a ■ \ ng the oSer f d r : h e 
r comprises utilizing a lightweight directDry access prc-ccc! tc ccir.msni 
cate the use./ identifier and c 0 ? J es pond i eg private keyword rc the per sis 
tea t s torage a r ea . 

5. A nethod as recited in claim 1 where ia each user iceclifier has a •: c r 
responding 1 s e r profile that represents a ficbal t s e r identity c c r - e s p c e 
ding tc a particilar sen ice manager aSet. . 

6. A method as recited in claim 1 whereii d e : : v i e g 3 i i ; : cl service? It 
rther comprists searching the persistent storage area, the p* r s :' s r e n ? s * 
or age area containing a user profile database, ire led icj?. fcr each ne:. 

a user access letcl, a list cf a 1 1 c ^ a b : e services, acc- a password. 

7. A method as recite* in claim 1 therein verifying at tie service hesi 



(£8))00-215168 (P2000-21i»8 



ccmpctM that ' t c cSr; • $ fee rate: *:th :hc selectee tier : it -.::*": e : is f 
ermine: :c kc::-s :Lc selectee semce frcn. ibe list cf i^f-ifCc fsitbc 
r cecp rises r c &c « c i c e t i a g ? he s e ! c c ; e d esc: identifier at r t !: c c s ; : : r 5 p c o 
ciig private *tcy*cr d :« the h c ? r screes ccepeic: isiog s ccirnct ga;c*j; 
interface. 

S. * ffcthes as recite: it c 1 2 : m i ?hc:eii Ihc service test c^isprit- con: 
sins a r 1 1 1 h e 1 \ i c a : : c t a : d access centre! 1 e gra e c r . 

9. A me t fc c d as r e c : : e d i c e!aii* I rbc r e : n the selected esc* icec:i!:e: \ 
od the coi re speed ins private key»c:i are ac t etna t i ca ! 1 t passed \'.. tfet ::t 

or acre service fee si ccopcters Icr use in . 

10. A nethed as recited it ciair* 1 f c r t h c f c cop r i s i b g c i s ? i 2 ? : r r th; lis 
t ef services io a user itterface displayed nn ihc a die i t- i s : ; a : i 0 r. c;it:t 

c craps f e r . 

11. A met-h^d as recited in claim I I art her comprising cogs \ 'eel i d g 2 sc: 
lice locator by the nuaigerceDt ecosele prcgrait fc; icciticg i seriirs c is 

a host server ccrapuler. 

12. A nethed as recited in claim 1 wherein transferring ere or uicre maoz 
geuect files en ;bc he 5 1 server tc the <drai n i 5 1 1 a t i n n server further con 
prises iiitiatiog a ccitmon gateway interface eo the adisrcistrarinn serve 
r ccmpn ter t h e 1 e b y c o 2 b ! i c g the 1 r a c s f^e r c f esc c r re r? r e maE2frer.ec: fries 

and a ploraiity q f c p c r t : i c g s y s t e in c c mm a c e £ . 

13. A system for sec Grieg a dec i 0 i s t r a t i c n cf services resicire en 0 r ; »: c; 
core service hest ccmpoters frcra an admin 1st rat Ice server ccmpurcr. ibe 
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administration server c c e p t • ; r c r e r e { : c : s a r i d c i c : 5 1 : z : : '. c : : : c 1 1 h a " 
inj a browser- type prog r as ace to the see ci idg.'c Jcivice eu;; c c p u : e r f 
osing an lorenct pre: c cel. the system ccispr i « i c g : 

a c s e r p r c f i i ; data r e p e 5 i : c : i f e i s : c r I i g data ; c i a : » n g : o but p ; i ? i 
leges, the data I n c ! c d i 1 8 . f c r tad esc. a o s c : access i e : e ! . a lis: c I 
services, and a pissverc; 
a service manage: sibccnp enco t u I a cccrca r : ca l i C£ interface residing c 
n tke adffiit istraticn 5 e r r e r ccmpi'ttr fur accepting z user identifier aoi : 
a ccr respesding kc?*c:d ate pzssiig the cser iicrlificr a e £ the ccrrest 
csding keyword tc tfcc ostr prcfiic data repesiicjv; 

a corapcneBt cob f i go r a t ; cc directory sellable fc: residing cd the cot c 
r more Service bests ccntalfliag composed eo b I i gt i a t i c n files fez sloiifi 
g management mcdales associated vith ihc plurality cf services, the ma n a 
gement modules cc&taininj ma oa g eme g t cat a otilizcc in administering :te 
plurality ol service?; 

a service best s o b c oro p e n c 8 1 c f t h t e emm o o i c a 1 i o n interface residing on 
the administration server compute: fcr accepting tae csci idco:ifie: an 
d tie ccr respesdi ng keywerd and passing the user identifier aoc Ibe corr 
expending keyvcrd tc tfee plurality cf service hesi computers fc: urine 
atico by examining data rciaiisg tc cser p r ^ v j i e f c s SUrcc :r lbc tser p 
r c f i 1 e data r e p o s i t c r y . 

14. h system fcr securing access tc the administratis cf a pic;a:i:y tf 
dutiact services residing cc cne c: nor. re service best computers f ? ca: z 
b adoisistraticD server computer cccoected Sc the cue c r rac:e service Ic 
it computers and tc an a dm i o i 1 1 ;a t i es client ccmpc-Ur. there being i se; 
rice manager residing on the a dm i n i s t r a \ \ c n serve* ccmporer. !tr system 
comp r i s i Bg : 

a comma o i c a t i on ccncecl ico bct*eec ihe sdnin •*£ rat tec client c G rap o t « x 
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and ibc afaifiisiri-.it:; Krrer ccmpuUr : b : ca& be osed lor p;.* v : =: I :£ ; 
selected cscr idectifie: ati a c c •: : e ; pc s £ i eg private Lc/?c;i ics se:v 
ice naoager. the cse: i d e g L ; f : e f beiig s r r a d d ic : j e c r ; f ~ a hvir 
g adnioislra-: ire access ;c al leas; one of the servires: 

ac autheDtiealc: ccafigurei fo: a t ; feet : i ca r : eg the user bj corcparieg : 
he £ c 1 c c i e d user iiectifie; arc the cc: r es pc fid i tg pri?a!e k e t v d ; g ag*:cs 
t a plurality of user identifiers acti pr.^ate key^c-rds s : c r e d i peri: 
Stent stcragc art a, tec c expiring pcrionscd order control c; -he scr:i:e 
raa i a gc r ; 

as access c ootid m c c h a c : s m icr icrivlsf i \\\\ c f services Ic fl. icr. ■ 
he isei associated with the o s c r itctiific: has a d ra i s i s t r a : i ; c access: 

a s e f v i c e best verifier f c : verifying that [ !; c g s c r a 5 s c c i a t c : * i l L '. r. 
e selected iser identifier is permitted to access s selected co C cf the 
scniccs ic the derived list cf services, the verifier residing a: tfee s 
enicc hest ccmpitcr associated vilb the selected service and utilizing 
access c o o 1 1 c 1 data associated t i t k the selected n s c r : d c r. • i f i c : i c the 
persistent storage area; a d d 

a data transfer component for transferring enc u: ore naeagcmcoi f:!c 
s on the service host compiler tc Ibc a cni d i s i r a t i on server ccmpatcr tfcc 
reby facilitating ara o i p 1 1 a i : or cf :bc naragclncni files b ; ! i i z ! c g lie ser 
vice manage r . 

15. A computer readable median configured tc store compete; prcg rarcir: eg 
inductions for secpiisg access tt the ac'ni c i st :a l i go cf a p ! g i s : : l y C 
distinct serf ices residinf on toe or cere se:?ice host c cmpi t e ; s from a 
b adriioistraticG server ceffipcter cccoecied tc tfee cne c: more service te- 
st compilers, there being a service manage: residing en the * dm ; l h t r a ; ! 
co server ccmpcter, the compete! readable medioir comprising: 

cenpoter prcgr ammi eg instructions for providing j selected user idtnti 
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fier a d c a cc r r e s pc n : i r £ p r : r a r « L*cyTc;g ( :ht rsc: ::u :: ■: ;:*s 
nged to identify a v 5 c r having adr.in if ; :a; ive access ;t $ : it;--: ~f 
the distinct services; 

conpetcr programming inst rcct iens Ic; actfees: : t < : : ?r :ir: l-c- ot : r-T.fi 
ring the selected tse: identifier ar: ric csi : c 5 fit;: &?:"-«".• kcr" ; rd 
against a pleialitf of rser i d e c t i I : r i 5 a 1 5 p;i?*U Uyr«.r:s jure* n a 
peisisteoi storage area. :he c err p a r : n g pcrfc.ac: truer (a;:*! of !":e • 
en- Ice manager; 

C cmp tier p r cg. r arecii og ; c s { r n t *. : c r < ft: deriving i •:-:: a f =er - :cc-5 • c * 
bicb tic iscr associated *iih the cm ::cc lifiei i:as a arc: * \ 1 1 ra t i : c ace 
ess; 

when a i e q a c s t is cade t c adiriE itter a selected >:iz c f i iu s e r t ; : e s i c 
the dented list of s e r ? i c t s , compete? p : c g r a icie I s s itstrecticcs ? c ; v e r 

i lying at . t he service b q s i ccmpoter as fee la ted *?ih tee.sei ecie-J service 
thai the o s e i associated with the « e 1 r c t e d c ? e r identifier is permitted 
tc access the select-ed service b? ex an in ;nf accc>s ccsirs! data as sec la 

ted with the s c ! c c i c d e s e ; i d e 1 t i f i e t in the p c : s I b : e c : s t <; r a g t i ; e a ; sr. 

d 

coopater programming instrecticos Icr -ransfcrrirg one cr mere roaragero 
ent files on the serrice host ccmpoter ic :fee a ;mi n i i i : < : i sr. ftr^cr : h »- 
ebj f a c i I i i a c i n y manipulate co c f the mar. ajremen: f i I e ? u : i ' i 2 i r. e t h r c * : : 
ice manager. 

3 DETAILED DESCRIPTION OF INVENTION 
Uackgrcind cf the Invent ion 
Field cl the Inrention 

The present i a v e £ t i c n relates g e t c r a I ! y to c oup r : e r £ c f <: *a i c \ i d c c rr. p c 
t e r o e \ w o r I manage, cent. Mere specifically, the p r t s e e t i e ? e g • : o r relate 
$ tc serter-based aianagcEct I sofUire aod <oh*are reg ; £ t ra c i on is a com 
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peter GCi*C' ; :. 

Discission ci K * i 2 1 e d h ■ ; 

I c 'ecent yesrs. ec?pEfe: nr vch ta^c ?:c»: o( ■ cn:r it si:t. sc:h a 
s tprber ef osers cr gee ? r a r:h I r a ! cc?er 8ge . on g ." s c ir :e:is$ ",f :tc t'p 
es cf service* arc p:*:::c'? s tinfic nrtxcrfc car p;cTi;c j r d e c p r r t . 
MscT c cmpn t c r a e t x c r k s a I I g tt cni ^ 5 e r s recess ■ o ail t y c s c f services, 
seek zs perusing r-e*i services c f accessing the Interred, it-c ;c :.c\ rci 
trie: c e e i e t c cue tea £ e a I e : v c : r e r c i f c i n e : « c r t c Gioit o n i c a : i c i p r g u i c ! . 
Witt the proliferation cf Serrices araihbic cr. scene computer Ed*crr.? 
is the iocreasitg berdet- cc £ r e t cm ci iiei*ort adai; q i s : • e itrs cf mar,? gin 
g tkose sen Ices. A s y s 1 e ci aim: n i < ;ra I c r d<:s- irpically has ic insu;! a 
fid manage software on several servers *bere eact server typically fcGSii 
cr prcvides ooe cr rocre services tc ccixcrl users. Depending cf the sia 
e cf the oeUcrk ans the ntrsbtr cf services . ;he day-to-day nacagcracti, 
Icr example. instaliifig, upgrading, a o d ueuble-shcci ieg, tbescfUarc b 
chiod these services can become a tedious, errcr-prcoe, and L imc-ccn s irai 
tg task Icr a system administrate:. This is particularly lroc v : t h rcga 
fd tc system adm : o i s t r a s o r s who are do: familiar «- i I h Lie scl*crk r the s 
e r ? e r s f c r the c o c f I g e r a ; i c n of ; hose servers. 

Jo a large-scale compete: nttT G rk t b a* presides many types cf services 
a ad applications as described a Love, there a :.c typical!? several tr mac 
J serier machiees accessible by ene-sirrs cr clici:is. The fact that tbt 
re are mo! lip I e servers cc ifce ieirork is usually t r a g s p a r c c 1 to a typic 
al c o d - « s c r woe is c c 1 ficrraally concerned *:tb the physical cc n f : g i : 1 1 i % 
o of the network. A system a d m i n i s t r a t c r lespccsibie fcr managing a c err 
puier nciwcik ccrna 1 1 1 dees sc from a serve: and cense ie, gecericaliy de 
sciibcd as ac a drai o I s t r 1 1 1 cn server, such as a Web server. Figere 1 :? 
a block diagram cf a computer network bavicg multiple servers accessible 
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b j c d d - o j e r s aid c c g & e c : c e t c a c z : n i a i s : : a i i f r, ? e r v = : r c ; r r. - / : 5 1 ; c c * 
ilh the alternated raa oa geEcn: capabilities cf ite pre $ cm :c?ca:icfi- h c 
ccpofer ncUerk 1&2 tes an g c'rci 0 : s t ; a ic : console ffeesr. a? c i i c : : :C-4 cce 
nected tc a Web c: adxiiistralc; server 106. Csi?tcc;eri :r fl'cb ie:v*f iC 
6 arc mi l liple "service* Servers 10$. Free the perspective cf adininisl; 
atici server 10S f servers ICS a : c referred tc as ma n a femer i dice;*. Ai 
thcogh from ac end-user's perspective, they are tlcpij servers, sbire ei 
cb server may have a particular foBcticr. c? preside a particular service 

Wben ae op date, ; 0 s I a ! ! a 1 1 ci , cr any l y p e cf maintenance is dene cn ap 
plication software residing c c one ci the servers ICS cr a n e v s e r f e f is 

added to network 102, tbe system adm: c i s I r a t c : most ccdifv software c-n 
administration server 106 accordingly. For t x 3 it p ! e , if a tev lea trie i 
s i a s t a 1 1 ,e d • 0 n an : existing mail server cr a ne* mai! scrrer is being add 
ed, the administrator must note cr j croc in b c r the 1 0 c 8 1 ion and ether info: 
nation c( tte new feat ire or serrei at the time cf ike update. The ad mi 
nist rater installs a new application cn a scrv<r 110. This in 1 crsa I ioi , 

including tbe location cf ae> si nafcinc n v % roc d u i e 1 cf tfce rev applicatic: 
, which can be in the fern cf a Uniform Rcsccrce Locale', roes: rher be c 
otered at console 104. Once manoaiiy entered at adm i n : s 1 1 at c r rccscic T 
04. the i d f 0 rroa t i c n cecdei- tc manage the ne* software cr server If 
c t e d ce administrate? server 106. At this s;age the Ucaticr c? a r 7 man 
agencot modoles oc server 110 are available to the STStera adrri n i s : :a l fi r 
from adrni d i s t ra tor console 104. The it* mail f c a : 0 r e from the example c 
anoot be ma o aged cr prcperly ccof ignrec br end users until it is "reris: 
c 1 e d = *itb the administrator server 106. Adni g i s s :a I ica Eerier 106 res! 

\ q 0 « * fa c ? e to fled the management nc ri b i e s a \ $ c- c i a i e d frith 1 b e n e * mail 
feature ce nanagemcrM clieets 108 before cid-osers can b c ^ : i? using the i 
0 f t wa r e . 



(64))00-215168 <P2000-21ife8 



Ttis is iz ire? ? ieivr: ^:<Cr : s \' : I he a dm : s : s ■ :z t * 3:; : r.: r::et ; ?: : 
fcr e o d- e 5 e r t The Uv? rcrc n- c i t c ; sc* 3 ? p ! : c « t : c n s c: t r c i r :. et-crkj 
t c be a ' a i 1 1 b . e In u s c z s s '-: z < s possible* This \. : ? c f > ? : ? site € I : r 
r-proce sicce :ce acini 6 i ? : :a • t : lis n per fcim nu: ta I cr t c - -1 e 1 siz : ec : 
asks such as wrir.pg cc^r : c ; 0 • x g 1 i 0 ^ cr the re* feature or c':-i :r 

g instai lati on. * I i c : ciK i a i c 1 be c s L c : e c a i 3 a cr : n i s t r a r c : cc 3 s ( .' £ . 

This p : c- fc c rx is c x a c e r b a : e d II : I. c : c 1 r e c c z c 0 $ of server:, p a r £ v i : L 
maiy tppli cat ices (e.?. 35 is nr. mtmi}. :b*i have freriear Borates, 
ccrjccticfis. g r ner • * r s i .* a s thai c c c : i c be : r. 5 i £ : 1 e d in a t ; r c ! ? 3 1 d h 
ccciate cancer. I c this type r= { ictiicg. managing network services rzi 
net coly be incflicieit. t irae-r on s irc i eg . aoc error -prone, bu! i leprae i its 
1 . 

One problem with present Web scree: based neiweris typical:? lading ni 
(tiple $ er.vi.ee hosts is designing and inp ! emcol i ig a tse: aDteeaticaiice 

mechanism. A We b serier based cccpttc: cctwerk. cr any t*pe cf compute 
r nc'-ffCTk. must have an a e t b e n I i c a t i g a p : c I c c d * cr ftechatisn: tc ensure t 
hat a user can perform only these operations c : 1 c c c s s t fe c s e files the a 
s c r is aithcriied tc perform cr access. • fc At case cf managing service 
S on the multiple se'vice bests, there can be rtcre ihau one SfSterr admin 
istraic: responsible: fcr rcaistaifting ifec services go tUse b c 5 : ?. . it 

possible that c e J tain a riff i e i M r 1 i c : * arc n e i giver c era p 1 e t c 1 1 1 r q r i 1 1 \ \ 
cd to pcrfcric all possible speratlots cc ihc Wfb server and the ferric? 
bests, »bich raij ool? be fiver to. Icr exarrpic, a senior or ^ < u p c r" svsl 
ec adniiislrale.' . Tbcs : sirce na nag leg scivices or the bests is ar- admi 
nistratics task dene thrcogh a 0 a dm i s I s i r a \ \ c- 0 icier face, sores type cf 0 
s e r autbenticattcc is necessary. 

Althcjgh aotbeal icaticc docs exist fo: Web- based ceteris, presenr imp 
leneotatioas and designs fcr user a u i h c r : z a t i co are icelficicct s s d r e f c 
t i t i * c . The a u t b e n t i c a i i 0 n referred t c here '' s the r e r \ f I c a i I c- e and a u l 
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bc/iialioi uf s;<s:ce ci ncucrfc a dra ; t i j • : a t c J s ! c r rr. s n a g i c g sc:v;:<i :a 
scrrice bests in 2 cc-^crl from a browser en at a ami 0 i 5 : : a ; : or, c.Mcle. 

Typical i 7 cac t service co a scnlcc best acd i:s r;:c «5 : s?f« raa :«?enJC!:• 
t modules bare differ cot a e : h c d t i c a t : c d m c c a 1 c i s m s ci s i a e 2 a j : s . There 
is m cleat standard co 3 prctGcci or process ;c; imp I crcc c : i bc at etc: tic 
aticc acd access cco-rc! ic a distributed tracer cc a Web serve; based s 
ystens. A system a c n : s ; a : a 1 0 r most ; e-a g t h e i t i c 2 ; c every rime ibe actzir. 
i s t r a t c r s I g 1 s en t c 2 s e 5 v i c e b c s : s i 0 c e the service h c ; t s are net i : c 
omraoBicaiicr *itfc each c 1 6 e r . .4 browse? prcgrarr car be raa os s client 
maning an? type cf operating systeaj. thus, the browser being 1 5 e d b? tt 
e administrate: may b c c be co a UNIX-based Miett and 05a? nor have a kne 
wn UNIX identitj. Since the brewer dees net have a fcoc^c JNfX identity 
. an identity cannot be ccmmioi ca tee from c n e service host tc cthct ser? 
ice hosts.. ...Thus, a system a ia'i c i s t r a t c \ must gc tbrcugb as autfccctlcaii 
cn process for eaeb service best since the a dm i 0 1 s ri a t c j decs cc: bare a 
single cr globally recognized identity. 

Therefore, it would be desirable tc manage enc-cset application scfUa 
re aod services afailable cd a computer ir f e t - c r k free a cetnra: iccatico 
by baring any accessary scJUarc (or ess 0 a f i 0 f these applications 2 a d se: 
vices automat icaliy tegislered at the centra*! } 0 c a : : c n ccrlr? is^aiiaii 
cd aod accessible from a welj-lncwn icraricr.. It wccld a!s; be dciirah! 
e tc have an authentication mce ha 0 i sin Jfcat picides fc: sisgie sigs on ! 
bat functions ritbin tbe envircerent cl a Web serrer and thai server's e 
listing system of user identity a b d access centre:. Fcribcr. it vizi* b 
« desirable tc aefcieve this from a central location anc by assigning a s 
n'versal identity tc a user raaoaging services (rem a browser :n a W £ b s e 
tver based uet-crl . 
Summary of the I meat i 00 
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Tg achieu the ftrtgr inf. :i %:c *, • d i nc r U • • * 

e S e n t i B v e 1 1 i e g . a m r t h c & ; I securing i c c t s b . c a s v * : *; iieii r • ; : : : h 
e a d o i d i s t r a t i o c c I f e ; r I c c ? : c ; : i : r $ u i ; c : r. c r «. : v : : c h - - : : . n r. : 
e:s from a q a d e ; r: i s : r a t : c r. s. f ; v c : ccxpu:cr is d i ? ; : I :. :" I : > ' - f ; i : : c : 
embodiment c r the prefer: i z ' c c : i c r. . z ?>.z\ : c *:.::«"]:: . - u c ; s - : i ; ? 5 - 
came, aad a ccrrespcrd i n.g p a s 5 * c i d are p:rv:s:d *. 1. ;it 5 1 ! - e r.£c«rir. 
vhtre the 0 s e r idefiifier is iss^ciciic *::f: j r. = : 1 1; 1 1 i :- : : 1 ■: h?v| 
eg administrative access rr tfcr services. 7h* ;c:-:c( i-araac: j l : i c : : ; : : 
a t e s the cser by c cmpa r i r, r the c>£: icen:if:c-: <r: :> a 5 ? - » ; c 5 r a ' ;. f : a i: 
st cf iser identifiers arc re r : c s p r r, d i r. g pass^crii iisitc : r. pt:«:?:cci 
memory. A list cf services tc rbifr :he ? 7 s : cm sar-f c U: fca? echini 
slrative access is derive: Ircre the rizia ic ?;rs:s:er- ccjnc:;.. WL:j, ihf 
s js t em administrator males a r e : 0 e s : t c a t & i s i ? : c ? c c e c ■ a <, : c * c : f I c c s 
from the list cf services, the adni ni s nam :" s access cent;';; is rcrifi 
ed it the service hest ccrcpiters ct shico * fc e reentered services iciicc 
bj examining access ccstrcl data in the persistc:: rcerr.s:*. .Vica jreme lm \ 
ties are transferred f r c m the service rest ccipcttrs : s the a dm : n i s : : a l i 
00 server c c mp 0 t e i thereby facilitating i^a n i p ! 2 : i c r. 0 f the nana gene n I I 
lies utilizing the service r- a n a j; e r . 

Id another preferred embed i ne n f . ih.: ^ dro i r? : > : r i : : r r ser.c: ccKptie: is 
ccnoec ted t c an a dm i n i s t 1 a : i n r r I i c e : c c rsp 1 1 r: ; r z 6 : i n s e b : ': * J c : :.• : g : i 
n , such as a Web browser. F h e c 5 e : identifier and p a s i v: c j d 3 : c p r 0 r i 6 c d 

tc the adroi n i s t r a t i cn server ccupeter over a c oa-imc 1 I c 2 1 i c r s cco&ccIi'ge 
beUecs the a dm i o i s t r a ! i 0 e (liert cctEptrei arri :hc a ir, i n I s t r a t : c-s server 
computer. The c cmne c i ca t i c n s ccnneclicn betffeec the adrin i s l 1 ai : ot hti 
ver computer and ihu a dm i t : 5 : ? a t i c c c'ien: ccopaie: an: ;hc cccneciicns 
amcag the a dm i n i s i 1 a t i c n server ccnpticr ni service best c cmsu : p r s 
nse an loterDel pictcccL s h c b as TCP/IP. 

[ d a 0 c t h e r aspect c f the 1 0 v e d t : c & . a s 1 s I e id I c r s e c n ; i 0 g 2 c c e $ 5 t c- 2 
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service ma&gcf 'n\: 3 3 mi f o f ? ;e: :nr s c r 7 ; c c 5 Gt ^ c c • u;;i c . ; f .. r r rres . 
compiler t c i * c r k i s described. It a preferred caib* £ : e:er. : . :h? serricc 
matager resides cc 2 n z d m 1 1 i 5 1 r a t i c n sc/vcr cgiu-uu: cc-r.-cie: :c ctltip 
!e hesi sc/vicc ccicptters. 30c is lite ccooecied ic a: a:c | B | £ : : , , ; a c ; 
ieet compete:. S c csmc 0 i r 1 i I en ecrr-ecricr betreeE ;Lc 3 is : r- : s • ; 1 : i c n c* 
leit ccnipQicr and 1 L e administration server confute; ic ;jce fr,; p;cv : di 
of a os e r identifier ar: pasjwerd re the service nana^c;. ■ Tec c»£r ideo 
tilier ^presents a iih. :*picallv a <vc l€D: 2 c 'in ! n j s i r * U r . ha v:^ a j m i E 
istniivc access Ic at least C ne cf the services. An ictieii i calcr, ?n: 
er the centre! cf a service manager, compa r cs the Die: i d e n 1 1 1 £ e r and pa 
SS*ord against a list cf eser identifiers a & d pal sveris stored in persis 
ten oicecm. Ad acces; centre] mechanism derives 3 list cf services ic 
which t be system 1 dn i n i s t r a t c r as sec : 3 led y i t b [be identifier and pas=w G 
ri has administrative access. A service fccsi vcfifiei, residing at tfee 
service host computer, verifies i fca t the srstcir 2 dinl c i s t r a : 0 r i s permit! 
ed to access t be seleciel services (rem ifcc list cf services by otiMzit 
g access control data associated with the sjsece a itn I t i s : r % t 0 1 stored la 

the persistent Bemcrv. .4 data transfer cuitpc n c a t Liansfcrs raa tagemei : 
files residing co :he service hest computers tc the a drai 2 i s t ra : i n n serve 
1 competcr thereby far:)iiafi E g itai i pa 1 ior. c f :he cinagciiesr f-!es c;i 
og the service ffianager. 

ic aocther aspect of the present icveBiicn. a sykicn ic- scccring adc; 
ihtntico of services reddest en service hcst C crjpoter> ic a ccouier 
netwoik from an adm ic i s \ r a I i cc server cc c oe c led u 3 0 a dm! n : s : r - c ; ; 0 r. ci: 
ent having a brewer program and U the service host ccmpoters esing a s 
loleroei prctocc! : sick 3 c TCP/IP, is described In a pref*r;cd emhedirn 
eot, a jser profile data repository stores data relating tc cse; privijc 
ges : indodicg a 8Se , access leveL a list of services, and a password. 
A conmenicatioo interface having a service manager sibcompcaec: itkli: 



I 1 
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H the afaisif t:i:ics accepts a a sc : same se: it d pa 

fscs the inlcrnat ice tc :tp C s €r p r c f : 1 € data : epos i :o i ;. . A r^p<;r:er.i c 
ctfignratict dirtctcry :ha: cat -?si:e ct a Sfrricc hs«: csc:;ics ccrsc- 
cnt cenf igoiatioi files t h a : stcre raa tagersc n i modeled ieiocjiii r?rv: 
ces. The ffiacigement nudoic' comic eifiifene;'. iba: can be ose: : j- 

admiEislcrinf the services. The ccmaun : ca i i &e inteffac? e I s o has a Per 
ficc fec£i Stbccopcfleni rfea: resides cc i L e adir : c : s t ; i : i ; o icr?cr rcspirr 
r thai accepts the cser cam* ace passer: ind passei the i £ f o rna i : p e rhe 

service host ccrapmis fc; * c r i |j c a : : o *: a; the service hc?ts hy cramini 
ng data relating tc iser privileges stored ic tfee sser profile d a 1 2 repe- 
s i t c r y . 

The ioTenticn : together witfc father advantages rbcicc?. may best be r 
uderstood by reference tc the ftlU*ic* description taken in ecujocctico 
with t he ac-ccrapjnr i ng drawings. 
Detailed Description of the Prefe rred Embci iinc i ■: s 

Reference will now be reade ic c e I a I I lc a preferred emhc t i ore n i cf lie. 
iDTention. An example of the preferred cnbcJioesi is iiitsirated in * h e 
accompanying drawings. While the iifcitacE be describe: ir cenjuo 

ctica with a preferred embcdimeit. it *» i 1 j be luderstcc: teat i: i< net 
iBtendei tc limit tfee inveniics :c one p^cfe'rec eisbcd ibece t . Tr- the con 
tiar ^ jt iE inteEced to ccver a!lcrs2t:vcs r rr. ad : f i c 2 : i c n s . and eQsjr^ic 
Qts as rear be incioded within !hc spirit and scope cl LU invent : 0 n as c 
efioed by tie appended c i a i on s . 

A nietbed and system Icr managing £ g f t wa 1 e applications and services fr 
cm a central location in 1 computer network is describes in the varices 
drawings. lc a large-scale ccipite: cctFcrt having frcilipi? serves 2tc 
a large e 0 c - u s c r base, marugicg applications and software Gn the ceUcr 
i is a tirae-consBraiog and error-prone task. Typically, a system adminis 
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inter installs a 1 e * a p p ' i c a i i c n c r service c t- a service 
c cf tbe oetvcrl serrerj *hich is BciraaliT dene 2: the s c : . r r . i r. .' 1 : ta '. 
i c 0 relating t c rta * a g e me n : c f the applicstic-E, in p £ r i i c ! c r : : ; ' " c $ : \ c 
d and names ol files cf managemenr me coles, are re 3 0 u 3 *. i r csici by the $: 
stem admioi 5 1 1a t cr . This irfcrmaticfi [5 t b e e enrcrc: en sr. ric in i ; : : 3 : : 
1 £ e r t e r t h r c 0 g b at a d rt i t i 5 r r a t c : c c c s c ! e . 0 r. c t the 1 t c a : : s c n I : * t r, e ? 

a p p 1 1 c a t i c n raa c a g eme c t tnc c c I c is t s c t c the i dn i n i £ : J a t i ? c t • t : . ' c: 
example a Web serve:, end b s c r f can access the ce* appiicaricn. Tih p- 
ocess bee cues cumber scire ard inefficient w^b e c there ire nary servers r s 
the aeUork. each having macv a pp 1 i c a \ \ cr s that require frecEeri spdarii 
g, modifying cr replacing. This problem is particiiiTij accte I rem tbe 
end-BScr' s perspective in that the expectance :ha; at ippl italic a be a-, 
ailabic for use soon after it is received Is high. Tbe rcc-it- 1 cm t c 
o-slep process described increases the time before an application cac be 

available to users en the eetwerk. 

The present intention is a met ted cf ai t nraa t i eg the pre cess cf regis te 
ring b e v applications and services at a central rn a n a g e n t n t Iccst i cti. St 
ch bs t Web serve;, thereby redo ting tbe'-amem: cf i clerical I cg ibc s y 5 1 i 
b administrator most remember anr! ma king a service available to end-oser 
s spcoer. In tbe described etcbed ioent . the -present i g > e fi i : c c i oclvcs h 
a v tog a management ecosele prcg^ara residing en a! s dmi i I s i J z \ : c;r: 5 c : > c : 
that ma 0 2 g e s other s e r t e r i c r service tests c 0 tbe a e t ? c r k . a ■ so 1 c I c : : e 
d to as management clients ic the sense thai these servers art 'clients' 

cf the administration server. The described embcdimeit aisc : 0 c ! u c e s % 

persistent storage area c c t I a i 0 i 0 g a database f c r s t c r i c g m a 1 a g e m e 1 1 i r 
fcrmaticG and uses (e.g. s v $ 1 e ra c r c- e t v c r k a d m i n : s i r a r c r s ) a u t r. e a 1 1 c a 1 : 3 
n information relating tc the services ct the service bests a r. d a s tcI:- 
known* di rettery associated with each ma sag erne st ciieo:. in other prefe- 
rred embodiments, described in mere detail b e ! c * : the storage areas, tor 
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rxtftpie, car be c 1 5 : ; ; r«: : t *: \i =• — Ir?;^r «. f - * : r. g u^'cUte 

d with only cne £ € r 7 e r . !n ^cUr :::'if:rv;i € 51 b f . : i sr.? n: . :hc r.sja £ effiet i 

ecosele prcgrart dot?. :o: :c:id- crtirKj r: :hr sens!: i j ; :i : I tr. ?cr?e:. 
bit can aisc be d i ? i r : b c : * d c t : - -l f r. :t* ^ r c a: sd.t: c: ? i rsic: cilt 

0 1 03 c b i 1? e . Tb e s e f srr: p r f : * r ; 5 2 : •: : : F : t c r t : . 

Fifare 2 is 3 blrck d t 3 ? r a r; cf 5r:vr; s : ;;< r si-psec n: ? ■ f ? cciipticr ne 
tvcrl in 3cccro2ncc <n : k enr cube 2 Ire : f : r. c prcFcn: i sv? r. i i r-e ■ j sei 
▼ e r - s i d c c cc f i go f a r : cr. 2 0 0 r. ; ? c c it- p i c : c "c-r:r-:k [no: sfcis-i) {an be vie* 
cd as having tic section?:, ; secricr. 2^2 r c ? r e s e : : i b £ zr. a d rc i t ! ? t f a t i s r. 
side and a sect ice 2 04 r e p r e s e n : i r-jr nc:«f. 'I fffve:*, c? service bests , 
Net shewn ic F i g g r c 1 are the octverk ec: users en c!ieri irac bines which 

can typically access ne:vcr^ serve's >G6 rc picririe services 0: fcr roc 
n i a g applications, c r p c r f c r m i c g ether n c *. ar c r k c p e r 3 t i c n s . A : 1 1 c c g h the 

end-aSers of a computer network are or, e c f the beneficiaries cf the pre 
sent i 0 v e a t i c n in that service? 3 c d appH cal ices c * the p e t V c r k are a t a i 
table to them sccoer and ic net £G dew- as cfter, in lit described embed 
lECDt the i o t e d t i c d is used bj 3 system asninistrauc; c: selwcrk outage: 

(i.e., the 0 s c r > . 

1 

Id tbe describee erobec imer . rea nagerre nr clients /. 06 are managed t b r r t g 
h a Web server 208. It cihe: pre I er red^tnibcr 1 ? rr. e n : s . ser?er SOU ran be s 
nether type cf servei. such as a ir;cre geoeric a dm i r ; sr ra : i c r srrrer. rr 
be a server that las other f h d c : : c n f depending en the s : re cl in; n e : * c r 
k a o d the capacity cl the server, in any case, server 2CS in the netxer 
k bas the rcie cf managic? naoagetseat cliec-ls 2 Q 6 . Oce f e e t r r ^ c f <crvc 
r 2 08 is thai il coo tains a ma sag erne n: cdesc'c prcgrac 210. described ir 
greater detail belc^. Ac-ciber feature cl Web server ?CS is :tai it f.zs 
access t c a persistent s t c 1 a g c area database 2 12 thai sure? ? e r i c e rea 
nagement caodnlc i&fGimalicc. Web server 2 08 c cn-oic c i c a t e s v'w h sicrage 2 
12 through the !i?ht-weight ciiectorv access piutccci (LD.4P) ZN. Ic 0 =. 
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her preferred emc :; i i aic n : 5 . ci*:t: ua'.a access prclov-ris c* : b< : ; t ; r :elTe 
cd s c i ? t : 2 05 a 0 i : : 1 ; s g c i r c a 2 i 2 . S i 0 r 3 ? c area : i 2 is a ! 5 9 • ; c : i i b ! e 
by management c!ier:;< 206. Persisiei:' storage 212 is 3 reliavt Zctaba 
se thai store* d 1 1 1 ; in :hc described emb oc ieic n: . in a L i £ r 3 : c r. i c i i f v :i> 
at. In ether pj efcrred cmuGdiraci is - the database esc be it r « '. a s i c r i ! r 
atabase f c r ie a : cr 5 1 c r c data in ac tbjccl-pritclec :?pe id id : (pes lie;*. 

U addition, it cihe; prefcrre; crebc t isc o : s . 5. crag? 212 cat be i : = ; : : 
bitcd across peifistei: S tor 3f e areas par; cf raziagcmem die::; 206. l .**e 
b stiver 2G& ? and ether pcrdstcai s : c r a g e nc d i dies a v 2 j 1 3 b : e ic 1 r £ oeir 
c r k and accessible by : h e servers. 

As mealicDfd, tie present i d ^ e d 1 1 g n is used primarily by a system & d m : 
ni st iatcr. The a dm i n i s t r a t c r accesses sever 2CS iircuga a special die 
nt administrator console 216. Ie the described cmbc diiccc l , cccsele 216 
is eq nipped with a. Web-based bjc*sei p.' eg. -am thai alleys the a iln i fi i s : : 2 1 
cr to access server 208 and, mere specifically, esc lusafcneni censcie ? 
rcgram 210 and storage area 212. S c 1 v - r 208 can a 1 5 c be refer : c £ I c as 
a nanafCEcnt cense I e host f r c m the perspective cf b:ersc: hes: 216. As 
w i 1 I be describee in greater d c { a i ! b e i c a system a dit \ 2 : s : r 3 1 c r ar. t s 
e browser hest 216 ic manage software ipplicatiois a nc services 01 aianag 
enient c I ients 2C6. 

Management clients 206 cat indict all cr seme t ■ the sc-^cr? cs the n 
etwerk. These rhat are managed b? a system admi 1 i s i i 3 1 « r tfcrcigh Wet se 
rter 208 c omrau 0 i c a t e with stcrage 212 ria LDAP , Eac t ma r. a g croc r : elicit 
has one cr core services shewn at 218 and cbc cr mere ccricspordisg macs 
gement mcdules shewn a! 220 cn service hest 2C7. Wfcen a tew te;vicr is 
iostalSed or an eiinice service is cpfraried. an entry in ma ga g eeie n : md 
ale area 220 is altered. As described in greater derail belcr. tfeih alt 
e r a t i 0 d is reflected i d c c : r e s p 0 0 i I n g entries in persistent ? t c r a 1 1 212. 
Although services 218 are shown separately f r on macageQieot mccdes 22G 
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in Figtre 1 : the :xg c cmpcaen : s are joiegra! 1c each c-hc:. Is i.il:: * 
ords, a s « r t i c e s Eiragemeni orcdtle if i e t e f r a ! I ? bcunJ riili :tc i i bo 
dy or fuscticcaj rrcceie? of the service. Rt.*cvt: f the t*c cccfck t: . : s 
ili t a t e separate rcies. Management neccles 220 are stored ic c'-tfijeri 
ticn files., a c c o f i g c : a t i c n tempered directory :> destiibcd : : grc«;c: 
detail belc*. lis Gihei preferred embodiments tfee solcraa £ ici :n rca-«gcr. 
eit rccdc:es 220 can be srerc: ir ether f c rrc a : s such ab a database cr a s 
taodard directcry that a i s c contains e:&er GCfi-ffa cag emc c t f f ! e t - 

The reDiicitg ccmpcnencs ic P : g i re 2 relating ic the rcanagemetl cocsg! 
e program address a a t hec t \ ca t ic e and a ceo J s centre! features. Manasece: 
t coiscle prcgram 210 has as at t fa ent i c a t i cn layer 2 2 E that perfores sse? 

verification and aatborisatioc f i c c t i c a S described in g r e 2 : t r cetai: * ! 

lb regard to Figures 8 tc II belc*. Associated with cocsnie he s t 208 is 

a Common Gateway: Interface, cr CGJ program, used bf a Web ? e r ¥ e r to esc 

cale programs. Id the described embodiment, a CGI pregvam III is used : 

o execcte programs from console hest 208 and is Ingica'l? divide: in to 

two parts: a mafiagemeot console CGI 236 and a servlei CGI 228. Managerac 

nt console CGI 225 ccremtniea'cs wilh n a Basemen t fcasrie program 208 and 

is discBSSed in greater detail with respect tc Tigtrcs 9 ace 10. Serrie 

t CGI 2 2 8 comniDe i ca r e s a c t be n t i c a r i c r data f-rnrr. ennse;? icsi 20£ :q tbc 

▼ 

service hosts 2 0 6 . aid is a component v e ) ' k n c * t : n the g r ? . 

On s e r t i c e bests 206 is a corresponding a t i b e r i i c a t : t c a c d access c c n • 
rol layer 23& thai is par- of management module component 220. 4niheti: 
calico lafcr 23 0 receives data from tense ie host 208 ttrecgr scrviet CG [ 
2 2 8 . These components are ssed ic ensue that a systec adrr. 1 1 i i r r a : c r I 
oggiog on ic use the reanageroeii ccusclc program tc icasage p a r : ; r c i a 5 $ fr 
vices is antbcMzed tc manage these services and also alleys i "super" f 
ystera admio i stratci tc add and delete a dm i o i s 1 1 a : c i s and particular p:i? 
ileges in the nanagenen! console fianewcik. Ir the dcsci ibet embodiment 
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, t b i < f u o c t i o d i i i i • I = i i i 1 1 1 : z • t ; : ;. : « 5 g \ \ £ • < ;. r. i * : :-•*•:* j 1 ? 
hewn io Figure *. Service bests 2 0 ^ rc -at : he : : : c? : • i -. = *:'! a *;es< {c 5 
t r c I and a 1 1 b 0 : 1 1 z \ i c 0 ri'A p e r t : s : e r : i 1 \ 1 \ \ u - ; : :: < : " 1 . 

Figore 3 is 3 flench?:; sbevizg zt: nervier t ; 5 : - 1 ; • ; i : :c?:si=r: 
nj a nev service ce a re'.scrl: 1 1 arc order:* rr C ( 5 s.. / - ; c f ? 

reseat io?coticE. The ficvchi:£ stews t h t step? izkec « s;s.en: ;drr.:r. 
istntcr vben ;cgisie*:Eg er.bc: 1 cc- service, l?? :s : : n i serrite. z: 
adding a ocw raa cagerae b : clieni ic :he s e I sre r > . A: c-.tf : :tS a service is 
iaslailcd cd a particular caaa recto : diet:. This is :;picaii: d^t :t 
loigb a clico; machine fuoci-cr, ;og as 2 fcrmft: Us; <:.i is t £ u 3 i I - pcrf 
crmcd by a system a dm i c i s : ■ a t c r . A naEigcoctl miiuic. c5Soc:alcd ?i-b i 
he sci vice, is a segment cf execiiiab'c cede ih: is alio itr. aiiec oc it 
c management client. Ao ciamplc c( 2 irana gcirc n: ntcust en a raai! serTtr 
is a module indicating a maximum quc.a per etd-eser: l b a ; is ; iht rtasiin 
en amcuat of meocrr a user cai take up. Asclbcr example is a - W c li scrrc: 
ovned by an ISP (loleroel service provider) ; ta i hcs:s *et sites for it 
s customers. [ e I fc i s coaleil a raa ta gciac 1 1 tnc&tii: ran manage 1 fa's ai!d:iic 
a of a ocff Web site cd t b c Web scrrer. \ 

The management mcccic cat be cec cf sclera! type*. I: ibe fescriie: c 
mbodinenl. the types cf maaagercea- recuses 2:e Iro^se r - L- a = ed . X-base:. z 
Dd coramand line- A b r c»sc r-ba 5 nscagcibci 1 nctiie is a??ccia:vi ri'.fc 2 
d appiicalion that is eieceied in 1 Web browser. [• is anicipaiet iba*. 
1 large majority cf the applicaticc iypes w i i ; be 2pp i i ca t i hb s j a n 

ii a Web browser. An X-bascj! ma oa g erne s t modaic \i 1 1 p i c « 1 T y assc::aic^ 
?itb a stand aicoe appiicatico tbat is rcn basse co the X-prciccc-. c c 
cmponeot of the UNIX cperallcg system. These appiicaticrs 2;? 5 e r: e : a i * y 
oct roe from ffithic a b r g vs e r bet from the ripcraling fjs^n ftcii. it 
is derifed frcm standard aod veii-lno*n X-vi n d cif s t a ONIX-based grjphir.a 
I nser interface. A ccmrtaad line ma oagerceGt rsccule is associated ^itb ? 
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d 2pp;;cz::cn -h::t -£.::> is: r : : ^ aim and lines, b- vrfcj-ici 

and eiccEiEG f r c- s t £ ^cb b:^:<:. A c cmina n d line may c: tu- r. \ hs;? r:c 
tine p 3 a n? r ; e : ? h rc-ciibtd fcilrt. E >: 2 m p i e 5 cf ccGn-ar; i : - f cc-fca-n 
s are fl I s s [cbtair. z i : ^ : r\ I \ |< $} . "sheerer (rersro : n f f raic ; : r. r. cv f 
rent oscr) . and " ::i r ^:c;;dc :nlcrna:irc ot pe; :o::iizcc c siatt?; r c-h 
er preferred e ia h : ri i n : = r.bc: type? c f e s c 3 g 5 n: c c r eccyies cs: be ir : siai 
led. 

At step 304 i h t ff?UE a Girl r ; s : rs t 0: ; c g : $ ; t f s ;he service ;nc is « a g e fi 
eat nodules c r ire k ?. r. i g e rr. t n : c 1 : c c : . it t be s c s c r i L e a e k b c- : i c c : : '. h : $ 
is done by r 5 c n i n 5 i c*i33:a £ c referred to ss rec_:cg en ibt na n agemec * cii 
e Q I - B7 registering the service a c d Eianagencnl mocclts. ihe sdninistrat 
ion server (server 2 68 in Figure 2} it ir.krrrcd vhz i ivpe cf mcc'cle i 
S feeing installed- Typical iy : a systert 3 ira i n : s t r a i c r registers several 
new serTjte* go varices rnanagemerM clients. Thus, sups 302 a q d 304 aie 

repeated fcr several services cn 7 3 : : c c s ma d a 3 crcc n ' cliccls. Occe a se 
r?ice is registered cn a serrice lest, certain files referred tc as ccinp 
c o e d t c c c f i g b r a t c p files s r c r i g g management data arc 1 : r c a : t : s and s t c r e c 

ia a c crap c 0 c r t crjnfigoiatioa direct?:* »n the service fcc^t. Step 35-1 I 

t described in g r e 1 1 c r 1 : e t a i i with respect : c F i ? c : c 4 . 

At step 306 a "discevtr 3 rcitire ii : d 1 1 i a 1 c ^ -i-rccgh c graphical tSe* 

▼ 

associated inte-faee a*sccia:ed y;:t ma n a feme a : console prcgrarr. ?I5 2nd 
is mo cn a service best. This r c u : ire a.'lc*£ the m n a gene c« ; cctsele p 
rof r am to register 3 particular service best. The system adm • » : s 1 : z \ c: . 

for example through browser host 516. instructs :h.e ma 62 gene n ; ccr.se \* 
to go 1 0 a particular service h c s r c ■ g r c 0 p c f service bests and check : 
c 5 c c what has b e e d r e z i s t e r r d . In r h e described embed ime £ t : . \. i s i 5 d rj f . 
e by the oanafcmeoi ccoscie by checking a *e' 5 -knovri directcy : c f c ; 1 e c 
tc as the ccupccccl configcraticn directory cd Ihe service he?. rs Iridic**, 
ed by the system a dm I & i s l r a l c r . Step 3 96 is described in greater detail 
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in Figure 5 . Is a P : e ! * : : i c c b u £ : m e e : the & i s c o ? c r : i : : n- 1 <• * - t c : : : 
locally cd t b e s e r r i c e h c s i a : the : : m e : h c service is t- e i s g : r= s : a ' f o 
aL Step 3 0 2 . The S e J ? i c e test ca? then broadcast tie >:<i!:5 ri rem 
etc c r i o t c d i 5 c c t c r : c r b e r* a i a g c me n t c c r. s cl e P : G g / aT; . if. the i f- 5 c r : 6 c 
d embod imci: , tfce s y s : t m administrate: ca: tcl: the rtaiareTtn: ccrsc!? ; 
o gc register ail the scrrice tcsis that *c:c rcccnil? fioclrie:. ccgrscc 
d, cr cc>ly a d d < c by :he a dm i n : s i r a i c : . i c 1 h c describes ecbs;- iircr. : . : r. 
e maBageraeD-. ccsscie program proceeds tc check those Service r. r E ' e cr.a * 
ill rtgiitej any opdetes by checking the cuxpcscDl c c o f : £ \ : 1 1 : r : :i:cc:c 
m, Oicc all the modified service hosts have been registered, end oser? 
can begin s s i n g the services c r applications a & i the : € £ i s 1 1 a t i c s p : c e e 
ss is complete. 

Figure 4 is a f I c v c fc a r t shewing in great e: detail step 3 C 4 cf Figcre 
of register lag a : service i & accordance * i t k tnc cicb C d i ice r- : cf the p r e f e 
at intention. Step 3 D 4 tot redeced the process cf regis ; e r inf. a ctw serv- 
ice cd a Service host sc that the m a c a g eme n ; c c a s g 1 c cat \i\t\ dlsccre: 
that tfec a new service has been registered cn thai host as iostrcctea b ? 
2 system administrator. At step 462 the service t: application r 7 p e Is 
ideatified to the s e r t i c e host. As ceserifced above, in the describe; e 
nbodiueoi. a service can be one cf three tvpes: br cvs e :~b a S e* . X base:, 
aod ccmriaod !ioe. In ether preferred ernboc Inn i i i . idditicoii :ype> r;r. 
be entered- I is t b e describee e m b c d i re t i t . th's step is p e : f o ■ n e c en i b e 
service hest zec is cne ray cf infermsrg the manigemccl corsci* cf -he a 
pplicatica type- Id other preferred embed imen t s , this i t f c rm? : i c n c z p b 
e entered at the browser bcs-.. Iifornaticc inputted a* the service best 
after step i 0 2 d e p c c d I c o t & e t r p e c f service identified. If the s e r ? : 
ce is Web-based, the flew chart proceed? ffi*h srep 404. A: Step 4 0 4 the 
system administrator enters ;he iccaticn cf the service's mi i z gemer. : race 
ule eo the service host. In the case cf Web-based services, the '. oca lis 
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o is c t p ; c a 1 : y in the f?ri< of \ ihifcro: Eesezrc; ic •:*:». * : 5 . ..- 
c p 4 06 the s e i ? i c t t j p e and lie jIL c ■ -he r. a q a ; e xc £■ * r ? r t ■ ■ £ ; 

parameters Id i >e '. \ -fe lc-kd Iscaiict cc the tC':ce fc . rf.. . - . f- ->*r.| 
bed erfibedimest, these t»c liens c J : : 1 o rroa ? i fin . refer:*: : t ; r :r :• ." r. : 
5, are saved in a UNIX [lie referred ic <s a ccifccicci - 1. • : i: : : ? - : =• - 
e in the d iiectcry referred 1 c is a r c m p n c t r i c c : f i ? i : a ■ I f • *. : : r c r ; •; : . . 
to ether preferred entcd i ne a I s . other c : -• or r : c-s sn i h c s-;;- : -t :- 5 
o be used ic stcre these ccttpcr.cr.ls. 

At step 4Q8 the t*c ccrcpooctis cc5lair.'c ir a ;?rv:ce -ar* SfrEtE : est" 
e are assigned cciipeceo: identifiers. U the describee- ?Ti:::i i.T-f - : . : t I 

consists cf tve parts: '0 a tolsoe idcfitifier 'such a? s Sc-'ari" P*r.;.;'< 
ge name, e.g. SUNWFTP) , md (?) a v c s i g e neither. This, jrc L'HI. ?.rc :U 

service type compel en is arc assigned g c c rx. p c e e c t i 4 entitle* anr >«rc-r; : 

0 a file i n X h c c 0 m p c n e d t confignfaiicc d i : e c : n r f . I r a d d : \ \ c : a 1 : 5 r r 
friendly 3 name fcr the service, which up tc this point has teen i ctiote 

bot length! and cryptic came, is c t : e r e d - This user 'Mendiy ranf. is 1 
be a a me t b 3 1 rill be displayed cn t b c graptica! user : e ■ e : a r e . atfrrlte 
d in greater detail *!tfc respect 10 Figure 5 beic*. A t step 426 the ; £ 1 
a or components described in steps 406 ac: 4 OS are Sic roc : r. a n assrepri 
ate file in the competent c u d I i go 1 a t ! c d i r i c t c- : y . Th r > . 3 f : e f ?:ep 42( : 

all the i n I c r m a £ ; c n needed : c p c : f r rr s ; c p 306 c [ F i g r : e 'J ' : h e "riser- 
ery* process) lor a Web-based type service is no red ic ?d a pp r cp f i a - e \ 
ile at a well-kncvE ti rectory and the p recess is complete. 

R e 1 0 r o i n g t c step 4 G I , if the service type is X - b a s e d . c <: n t r c : precede 
s with Step 410. .As describee abeve, an X-bascc type service ii nvizzl 

1 y associated with a stand 3 ! e o e application the: is r t n base: c c- \ h { X 
prctcccl, a conpoieot sf the UNIX nperatirsg sysiea:. At s:cp 410. :?u s^ 
stem administrator eaters the path necessary 1 0 invoke i h c X - 1 a S c c a p P 1 : 
cation. At step 412 a UNIX tsc- asd user grcup are t c 1 1 r e & if: crdcr ic 
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i n t o k < the > ; t <? : e i 2 p ;■ ■ ! c ?. : : t z . C c n : r 0 1 t b c b 3 € if re:- 4 ^ £ » r. c ■ • : 1 1 
psth. pser 05fl:e. 2nd jrruB? j;e assigned ccapctfEi i ;e ; : : f i ■ ; s . A: step 
450 t b e competent identifiers arc srertd in an appr ; p: : a I c lie ::: 
c cmpc a e 0 1 ccnfigiriticc cirectcry. 

rcr ccrrtnar: iiec type caiagceeai ie g e 0 : e s ? the syjtcnc j d E : : i s ■ : 3 : c : cc: 
e:s data slffrls: tc tic X - b 2 s c d type: a path ic invche the cciscaGE : : tc 
acd 2 UNIX cser a t ri grr?tp came necessary to icrcke :be UNIX zip I i c a : i t c 
, as sbcvr 3: step 414. At step -116 ihc £ f 5 i c adm i ■ i s i r a : c 1 d c ■ e : m : r ^ s 
whether there art any rin-iire parameters it the ccrtaian: ' 5 c f 1 € c t e d in t 
he ccmEaod line type ma ru gpreet t ran d o : c) . These parameters arc net enter 
ed at the time the service is being registered bst a: tee iice the cuGza 
ai is executed cr run by the end-user. The graphical user icterface is 
modified or ccstcmiied tc reflect whether the eod-issr rat enter r o 1 1 : m t 
parameters ..{e.g.: opticos ihe cser cat select ai the -ice the service is 
being csed). If there are runtime parameters, the = j 5 » c cr a dtt i s i s l i c : 
Supplies t k em in respense tc a prompt f r cm the management ccnsc!e : s era 
pbicai user interface. At step U8 the i y s : c rr a dre I g : s t r a i c : enters Ma: 
ic parameters reqiired by the comma id. .^ccinmand line type manaeement m 
odnle Fill always have slatic parameters repardiess cf Fbetler the comma 
nc* has runtime parameters. CcDtrcl then gce-s tc step 40S irb e f e 2H :be 
data is assigned eompcneot identifiers, as *as dene fcr X-batec ni ffefe- 
based management mcdaies. Tfce ccmpcnec; identifiers are thee \2^tz i: f 
iles stored in the ccnfigiraticn compcecn t direcrcrv at step <2G. [3 ch 
e described embed ime at . the file name has the fcimai cf s c nmpc ne r. t ident 
ifier - version camber" which facilitates determining the number of cc-mp 
ODents that are registered ic the directory There each ecapenev: has csr 

file. Ic ether pielcrred erebedirace t s . the file came car. be in aoctfeei 
formats where there is coe file per ccmrsacd. e.g. competent iceciifier 
c enraa nd * . . 
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F i g i r e 5 is 3 f i c s c h a r : j h c - ! c g : i: j r e a : e r d e : 2 \ I ftp S & 6 • r : ? : ; c 3 
ic acccidzocc witb cce embed litest cf :he preset: i even? its. : : the 6cs 
cribed embed iiaeoi . 2 service hes: Lis: a ccotpGnec: scft*are scsir.est :bh: 
Bg that contains al" the management nc c d o I e s cf the services t.:. :ta: :c;v 
ice best. The ccmpcncct cgb f i gc ;r a 1 i co cireclcjy resiries jr. :fcis sc^iteti 
Tbe service hest aisc has a nssiafcmeftt console framc*c:fc scire e: :Lc- 
ccotains cede aisc contained in the mi o a g en c n t c c t s c i r p ; c g : z it r c s I d 1 c g 
en tbc adei c i s : r a t i cc serve;. Fci example, the tn c_r e ? ccrcinar.: ate IS? 
remote shell cess, a program for leccicly esecaiieg 1 based a r. c cemxat: 
1 i d e management progxaaic . reside in both the management ecrscie a c d ;bc 
service best. Figure 5 describes a d i s e G ? c r y process t fc a t searches tU 
compcBCBt software segment cc a service Lost fo: Eaiiageraeci snnrities thai 
have oct jet been registered usicg scftwa-e in :hc nana gene ft console f 
r imcwork s egnen t . 

At step 5 0 2 a system adm i n i s t r a i c r specifics a service h c s r name cr a 
service same through a graphical user interface en the browser best. Ei 
ampies c 1 graphical user interfaces oscd ic l be described embed in e fit arc 
sbcwa la greater detail is Figores 6, f^and 8. .As described above . the 
re can be many service bests, each cf sfeich have several services aval la 
b I c . T b c s e c b c I c e s are presetted t c a s r s it rr a dm i n i s : t a i c r : h r o t g h a i s 

T 

er interlace. Typical : y an a dm i c- i s t r a t g r wiii efcoese a!! -hi ?f?v|re i<: 
sts thai contain services t fe a : were recently modified c; adderi. an 3 *\ ". \ 

enter ail Ibcse service hosts at once frcm the browser Ns:. At step 5 
N the management console host cenoecis ic tbc one or mc r t se-ricf hosts 

specified at step 5 0 2 ic scan a weit-ltncwn directory for c omp one c i cenf 
igoratiot files. Ic tfce described era be dine fit ibc we II -knows direc ; c:y i 
s the ccnpcfiCGt CCD f i gc f a t j cn c'irtc-cry. Tfce managerccnt ccoseie ccrciDurr 
cates with the service host tnioegh a standard CGI (Cqdecb Gateway !n:e? 
face) p r o g ram, typically oscd to initiate a Web- based pjcfiam from a Web 
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serve;, end :? ~c ; ; -* L .;-rn ;■ .-5 ; ; r : . if. otU: preferred ore - : : n; r. 1 i ; 
he CGf prcgraii ^ 2 y cc: tc ttti-H if iLe 2 iv.l n i $ : r a : i c ; r :? r : •, *. a 5* 

cl)-ba$cd serve-. 7 « € = c * e r : •:- 1 if Derfsrmcd siicf a conx;r:c !:::C prczra- 

that s c n : s c cehes & c i * c : <. J r- i t c t - 0 1 k c c- 1 n c c t i no a 0 : i a r c : h enj e >: c c r : t c 
oe ike d e $ 1 i : a i : ^ : server - ): r r e speci-icaiiy. is the deitr :b?c <il:<d;me 
Gi. the c cniRs d d s cxeccis; by ^e sanagcaca! cccscic. cr.:r ihf u?:tc7 
k ccRGCctior, cm; :ne f e r - = c c fces;. Ir tbc dcscrlhed entscinei : . i : : i ii 

dent tsisg cD ISP rcime s b c 1 i prciccci. Thus. :i:izg -hs s : z n the UN! 
X'lisi filer c orsina = c . Is. is execs.ee i c the correct*: CGnfieur&t :o- : 
ircctcrv t c get a lisi c f lie component c 02 f i g s r 3 i i g n files, k iis: , : f 
files taat need tc be regis: ere 5 the id? eager.cn t ten sci-: is s?iit t? 

the adniohtraticc s c r f c : . 

At step 50 6 t fe e ma 1 a g c me n • c c n s c ! t exsnircs the i i s t g ( f ; i e 5 " i i s c 0 v e 
red* cd all tjic Sc/vicc hc-Sts that ^ e r e specified io step 505. The same 

cooeccti-CD b e i v e c 0 the m 3 c a g c n: c n t c c r S « I c 1 c c the s c : ? i c t h c s s is 1 h c c 

Esed tc retrieve -he contents cf these files- Id the described enact in 
c n I . tht UNIX "concatenate^ c c hie a n iL cat. is used c 0 ibe service host tc 

retrieve the content el eat I file. Ie cMbc; preferred enrb sd ine a t s . £ I nr. 
i I a r commands f c r r c : r i e v i c g the c c n t c b i c f a file in c t h e r c p e r 2 1 i c g $ y 
stems can be used. Once the ccsiecis of eac-fc file to be registered are 
retrieved f : c a 1 1 c service i: c s L : , the c c r. i e d ! . c f each i c d I v i 3 u < ' til? i 5 

parsed usiog s t a □ d a r d arc &ei)-kr.c*B pa/sicg lectcicits t*y -.he lianageru- 
n t c 0 d s c 1 c cn tie adniiiitratica server. I c : t c destr ibci c bl b c s i ib c > : . z 

compooenl c cof igi ra 1 i qe file is flat ASCII file. By parsing the renter. 
t c f a f I i e f the file's c 1 e r \ r i e c d i j name, c c hi p g c e n t i tl e 1 \ \ \ f i e ; s . a n c c 
tker cemmand ereciticc i o f c- rma t i c £ are ideotified fc: each file. [ :tc 

described embodiment; thi^ information reflerli the i t \ c rma t i c n Ua: ^3 
s sared ia the e cmpc 0 1 con f i ge r a t i cn difcctory I c r each c! 1 c c three m 
aoagemeut model e types as shewn ic Figure 4. 
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A i Step 5 0 S : c : a r 3 parked f 1 : ; in the rcnpGicci c c n f : r 1 : z : : ' r *" i ! c ■= : ; 
st ci ca go i persistent iter age \\%\. As described a be re. « r •;- rr> p c r« t n t co 
cfiguiatico file certains all the i r f c r ma i : G n that I S : r f f : : t? ! 3 c r. c h t 

corresponding s e • r i c e . This i r. f c r re a t i c t is 1 c * s t c r e : r. 2 i a \ i b § s c ' l 

persistec: sic rage accessible bv the rca t ageire 0 1 ccr?c < p: eg: air sr. : l- 
the service hosts. A svs-ea: a dmi n i s t ra ic : cao r.c* mac a jr e 1 scr-icc :f.:c 
cgh the management ccnscle by fsccifyinf liie coGUiit cf service > i:a 

nigcracnt data s t c \ e i in the persisted and /eiiabie database, if tec fc 
scribed e&bciimert, data cr. the persisieni sicragc remain srhej the r.e:« 
crk is d ewe cr when the management ccr.sclc is eci active, as*i : >. arrest; 
bit t i r c 0 g h the li g b t - we i g h : d i r e c 1 0 1 } access p r c t c c c 1 [LdS P) . Is c the: 

preferred e mb 0 d i me n t s , a '. t e : r. a 1 1 ? e access p : c I c c c ! s c a j be c s t a depend i 
Dg cn the type of storage being usee and t b c network. 

Figures 6. and 7. are screen shcts of a g r a p fe i c 1 1 use: interlace dispiar 
ed cn the browser best in acccrdancc with enc cubed iced pI the pre sect 
i n t c d t 1 c c . Figure 6 is an initial screen s h 0 1 cf the "'Register Services 
user interface. A winds;? 6 02 ecu tains 3 text entry scfc ?irdc* 604 ; r. 
which a system aeirin i s t ra tor enters tie ^ao:e cf a service he 5 1 cg nfeich 
services the administrator Taots t c manages reside. ! c the describee em 
be d i me q t there is at area t c enter cne^scrvice host. ! 1 c t h c r prefer: c d 

embodiments a a adtorns st rarer c a 1 eater mere t fe a c ere service t c F ! . A '. s 
0 sbcwo in text entry sub windew 606 in *hich an administrate? r. a b tnui 

a service host name 1 1 a t centals services the 1 lm\ d i s : r a t c r want?, is i< 
oregister . 0 0 c e the c b 0 i c e J have been e c t e r e d . tic user can c ' c k c c be 
1 1 0 o 60 8 to retrieve a list g f services that tie esc: is suthcr ized 1 c in 
a n a g e c g that service best- T fc e admin: 51 rater c a e s 1 S 0 p : e s b u t : 0 n 6 Hi 

t c retrieve a ! i s l c f services c e roar service h c s • which tan be o n r e p i 
s 1 e r c d . 

Figure 1 is a screen shct sbc<nag another segment cf the "Register 5 c r 
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y i e e s " b s e r interface. This graphical b f t r : r : «: r I a c •: s ' ' : *£ ^ : 7 :- . •. r i ;" 
rainistratcr rc select services thai the acra : 1 i s • : 1 : r. : h ?: L«::ui ;% r. 
afiage. liscr an 1 be 1 : za : i cc act zeeess ccik. h cesrr itcs i :« 
tail feeler. A list cf services 612 I? oispiajcr i: > *:r::.>. ?M . Li-; 
612 is derived frcm da:a relating :c :re c 5 e r Fierce lr :rc 

e c 0 1 3 i 1 s these services available c n the 5 e : t i c t c c 5 : e r { z : c t ! : j 
604 cf Fignie 6. The 57s t c a :c i c : s t r a t c : ? e I c c 1 s ih^K tt: : c u > : 
1 5 t c B3 a b a 1 e c : access. 1 c 1 b e describe: e q b c d i ir c r. t l 5 : s is 5 h : ; « r; ; : L 
aD asterisk tc tfce left cf the servic? oarae. Sick a? : .fe-: Sec Nc-> '7.Y; 
ervice 616. Once tfee service cr services have beer prime:, I'm vk: ? 
licks en the "Register Service? Selected Above* b s r 615. I c tie descib 
ed embodiment this is dece tsicg a point: eg cctjcc s 1: c k as 1 recuse z: : 
a c k ball and is implemented in a * j e d c * e 0 v i r c is it e r : . I ~ c L h c : u f e * e : . r e c 

embed i me ait ? a ntfD -graphical cser interface, s u c a? a simple icx: b^Sv 
ti interface cr a more sophisticated v o i c c - r e c g f l i : • c t b a ? e d inter face cs 
n be used t c enter this information, a s *e ! I as : r e I p. 1 c ;r.a t i c e c c s c :• \ be 
d b e I c v with respect tc the other screens. • 

As described above, a management console prcg-arr cf the prtsert :D*ct- 
icu includes a 'single sign-on' method of iser aothetr irai f n b and access 

control thai benefit frcm ha v leg a c enj .- 2 i ' na na g err c c t rensoie fcr rr-aizs 
iug services cn multiple scrfice hosis in a d i s • - i be i cd Weh-bs 1 1 c ec:*-s: 
k. Pre Sect It ia Web-based networks a srstem a obi i n i s t : a t cr responsible ■ 
or maintaining services available on multiple service bests tic s r : f - 3 2 1 b 
eat i cat e aid pass the a d rn i e i s 1 1 a t c r : s credentials u each serine best : 
c which the adn i n i s t r a t c r legs cn. TI i s is true since ire 1 dmi r i s. t J a : c r 
, cperaticg from a browser, dees net h 3 > e a s i r g i e . u 2 i r e r s a : i d e n 1 s : ? « 
hit can be used fcr Mtbeftlicaticn. Here a a t b c n ii c a t i c £ refers !? ? r : : f 
ying credeotiais and antfeoriz aticcs cf a cser beferc being slicked rc rra 
d a g e 3 particular service h c s ; c r , mere specifically, p c : f c : m s p e ? a ' i C » S 
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for mapafia* £2 : ;.- : r : : ; 1 : ; ; * C f-. let i: : :-:c'?f::r :t 

have a c c 0 £ i £ : € n i 1 0 d c : s : a ; i ! c g '.fert^Lcc: [fit Et:™?:ii ■ its :sr: 

iS 3 fid 7h2t : h 3 • 5£J- : s ? : " r - t £ ; r : : c . C{; -j t j-:; ? . 

Tre presen: Icventif,: a:ir-< c i d ' : * ' [ 1 t -; ttf.j;";ff'- 1 : *no ibcr >:r?:t 
gn nn I a r 3 0 1 h e r. ! i c a : i -eiitir.- cc i> r, * J: < r • : . f >c:-i(c> ' n iifvirf r. 
OSU r r cm a fc ^ c - = c r fc 0 s ; . T!.c nc 5 z % c-!r.e u \ c^rso "t p::.^ar : 2;r; cf F i - ~ r <: 
2 c r. n t a : n < ar a u : h c : i z : i 0 3 srd l c c e s. ? c;:,;;; cis^'r.cs: isjcr :Z2. 
This authorization ! a r e r 3 c c e 5 5 c e u;c: d e : 2 r j:r: f a : z b 3 s ? 212 frr r?' : { : 
caticc and ccinunicatcs this i fe 1 c 1 c: 5 l : 0 n tu cc i r- t i us s£ ! n; ai • bs ; : ; ] 0- 
cr aatheni ication layers 220 or 1 service hot: 2*c. Re i n- ! c r is a i i & e is 
handled and t r a csit i ; t e c U each icnicc h n i 1 a s?>:tn: gdm : n i ? f r 1 \ 0 r *art 
S to raaBage, sitbeui having the » da: ! n : s t \ 3 1 r : r c - a u ; h f n i : r a 1 c cr, each jr 
di ?i d b a I serf ice host . 

ifllcrraat icn. relatiag to each ejer is sicrec in d a : a 5:. a ? e 212 and inferm 
itico entered by a *se : is a u thee t i ca \ ec z g a : n « 1 this i n I crna'-icr . The 
infcrnaticD. ci creicot 11 1 s , if rcrifie;:. ii passed ifcrcigh- a CC 1 prcgra 
n tc toe service hosts indicated bv tse tier. Ot-f.e receipt by the serv 
ice bests the f n format i cq is ;c -1 0 t \ c d i i 1 1 d agsinsi :he user profile i 
0 the database ce behalf of the s y s t c in a dm I 0 : 5 • r 1 a r : In otter scrds, :fc 
is is dene "behind the scenes' ^i-tcc; j c : ? Tv t n : i c G c: as" ev; :3 c»?nj f 
ron the BSe/. He user c n J y f, a5 tc leg cr (i.e. ti'.n cc r ^ a : r -f P - K?: ; 
cn sach as name and passrc:^) U the n.anagen}CDt cenre ihrciujrh 2 brc^Se 
r once afid this i n f c rma t i g e Is pasted cc t r. the service besif attcmatica 
Hi- 

Figure 8 is a sc/ceo sbc! cf 2 graphical user interface reiaring tc It 
e access cccirol and 3 s i he n 11 ca • i 0 e cf a cse* el the ma na gerce 1 1 cccscie 
program Id acccidaece ffith one e m b c ci : rr e n t cf the present !Dv tfi ;;oo. A » 
ifldc* 7 0 2 ha< 1 1 e beadiog s Manan Admi r- i s t r z \ c r j . c This rir.dor ; s a < ec ; 
to eatei oew a d ro i 0 i s t r a t c r s acd assccistee pas sherds and Services ne 
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tt adoini si racer ht c'.]y.*t: tc manage, x : r r - '< : s:V* 

[nio? 704 Ic: crieriig an acicir is e iaU: oarm and ? ak-ri oi : (=G ?etf ? G£ 

fcr e;:c:in£ so: i c - e r I c : i r. f a pass^ua. ;c ire :c«v: per: ! c r of *jndG 
* 7 0 2. are the r ;ub-*i ndt=" 710 c?otaii5 a :is: cf service? f:«i *r. id tic 

adniiristraicj entered in sofc-*icas* 7CM cil: be a : I c ~ c d -ueaft. Occ 
e ifee services are selected by :hc managing 3 super' itxi e : s t :z !c r . ib 
e be . : cd 712 i s pressed. 

Figeres 9 age 10 art ficrcbarcs of a pieces Ic: enforcing access c c d t 
ic! 2hi aut he r i ?. a t \ cr :n the R2oagcEtr: cmic! prcgrat if scccrcaoce 
tfe coe embed i men t cf tr.e present i £?e n t ; . The cnfcrccxeni p recess beg 
ios with j nser pciating the brc?ser best [i.e. 2 drai o I s 1 : t 1 i c n ccnscle 5 
16 of Figire 2) tc a URL cf the managers n : cunseie host. Tlas. at step 
B02 the oser enters the URL r.f tie ccnscle best from the browser bfist- 
The URL ferihe managemeBt cobscIc is io the fcrrc cf i s;atiard liltl. in ; 
Web-bised cetvcrlt. Id other preferred embed inien t s , ctber upes of isea 
tors can be used depending cn the type cf Berwcrk. 

At Step S e 4 the adrci b i s t ra tc r/a sc r is challenged fci a user naroe ar.d p 
asswerd f«r access tG the ma oagemec t ccor^-ie p:ngi a n5 SE tfc e cr-nscle h c s 1 
. At step 8 0 6 the management ccnscic accepts l h e user n arise znd password 
cnteied in step 8M and :he user is a c tject i'ca ted. T>:$ sic;? is descrit 
ed ie greater cetail ic F : g b r e li. The mar agcrter: ccc5<;;c disp!a?s i h e 
services cn a selected service host as Shove In area 512 cf Figure 6 to a 
t the Bser is authorized tc manage bj examining data in database 212. I 
bis is done by using the ma cavemen t cccscle segment cf tee CGI as £tc*L 
is F i g i r e 2 . Id the described emb c d i me o : . an a dm i n i s : r a t c r : : a o : fc c i : z a : 
icn is defined In terms of serf ices that the a dm I r. : s l r a t c r h aliened : ?■ 
manage. Duriiig this step the management ccrncie ccnsfr:ci« s Mil. Ie: e 
ach service and he si that the administrator is aliened :c manage. This; 
process is a ! s c described i o g ? e a i e r detail with respect i c F : g g r e M . 
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The URLs aliens the crr?r e t€s: tr ; n r j : ; e*ch ser»:rt ':■>; ji» s-.-.iu- 
1 1 a t cao be masagee b y ire a : r. i c i s r r a : c r . 

At step 8C5 the r? f: c c ;, fi z an josratfe c: a service ''i.e. 5 ca:L:c:l 
jr service f ' orc a service t n > i ) that the cs e : rznib in reaizcc t sc r 7 i c 
e cac reside cn scrorj; d:fff; ?Il < e r y i c e hosts sc -fee k £ t ■ -i=c £ : cheese 
an instance cf a service fret 3 particular service he*:.. H ; electing 
the user frieadly came t h r cser has seitcied g n e c I ihe -J R L ^ cs:s • .« c r : e: 
in step 806. At step 810 the naragerte fit cccscle test isiiiaiu cfce sc; 
?lcfc CGI ccnpcDeot cf the CGI. In the n'cseribei effibc d inec * , trie is d u c 
e by coEpariog the tser credestia's g: prcflic ajjairsi the users anther 
ticalioo a 0 d access centre! data i: tbe database. This veiificaticr is 
performed before a c 0 o a e c t i g n is made to the service best by se;vlet CGI 
22 i as go extra precaiticc against oserj try inf. tc ma rage services cn : 
hat SerriceJost .witbcit going thrcngfe ir. 2 n a f> e m e n t console host 2 0 8. Sii 
c« this is 2 network envi rcimtit. it is possible (c: a user tc bypass re 
e ccfisele best verificaticc steps and attenpr to access services cc a sc 
rrice lost directly frcrc 3 client Eacbice : instead ct f r c- is browser host 
216 cf Figure t- Th c s r the user credentials are compare: agaiesi \ he us 
er data stored in database l\1 by the servier CGI. 

At step 812 the se-vle- CGI uses a s r a s d a r < prccec'ore !o: passing the 
user credentials tc the serrice hesi c Usrs indicated by *hf esc:. ic 
tbe described embed irren: . once the data M received, the s«:*ic« hos: p 
cr/erins 1 1 1 b en I i c a t i oc and access control osisg the data b? c c n; p a r i c jc it 
against dala in the database. Ic ctfcer preferred embori- i rsc t : ? t this stc 
p may aot be accessary depeodicg cn iedepecdeEt secirlty features aiaiis 
ble cn the particular ne-wo'k imp I eraec ting the ma n a geme n : c'r^c'e prcera 
n. This re-iathcit ics: ioc is dose withoet an? ; b t e r v ca 1 i or. frse tl)f Ese 
r and is performed ic enSMc tbaL a user is not attempting : c i o f cc i\: 
ectly to the service hest thereby c i r c ersr en I i o % ihe a u i he c t i c a t i ce ant a 
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c c e s s centre! ! a y e r c f : n e Ranges en. c c i s c 1 e >. t ? : . T h : - . . ; : ; ; < - t. 1 1 £ 
a second c I e c I a g 3 i d s : the d a : a b z s c • i I !> c c i r e ? c i : : c z :ic : c ■: • : » p • r f •;• 
rro any extra eperaricat. ihe ru tig est it ;cr. soit c:sr:c ? s r - r * z~>*i 

0 e n t c f s e r t ices : r. the c c t * n : t . If : Si e r c - a e t s e r : i c e *. : r r : = - c ■: c f * = r " 
at step SH, inaoa g ecte c t cuosCii prcgran en tie enrsrie rti: ? :rc 

tner tc p c t f croi mar.ageraec i Gpc:at ice; pr I hi select ct $ s " r - -- 1 ?f;!co 

5 frciH the brcrser as shewn zt s:ep 6 i 6 a; rhicb pcir: : r e srl* :^fr'r: r. 
rocess is complete. If the r e-au ; he n ; : ci t : c c i: ret e trees:::'. ?-e 

1 is denied 2 a t h c • i t J c; ca n a 1 1 tie > c i c c : c 1 s e r r i .: c a £ • if s I » : r. c i r 
gin screen aga i 1 . 

Figire 11 is a flowchart f. h c * i n g i 0 greater detail step SH 5 f lif-re 
9 . 1b step 866 the 1 s e r is authenticated and : h e cervices the- I '1 e 1: ? r : 

is aithorized to a c c e s ? are de t e rra i d e c aid the UxLs to each rl these sc 
r n c e s are.cci5tn.cted. A • step 8 G 2 the c a n a g erne r- 1 c 0 n s c 1 e I; « 1 1 a s : h e n • 
icates the 0 s e r by retrieving information iciaiicf 15 itc use: hsm the 
database. This iafcrnaticn censists cf :hc oser : s nzree aoc passer:. 0 
oce the aser name and password are verified, a list cf services: that 1 r - 

user is anther ize: : tc manage is deiitco.', At siep 9N the csrscle host 
initiates the management censclE gaunt 2 2 6 if the CGI pre gran wirr the 

user credentials which vere t e r i f i e c 3* sie'p 90 2. As :c$c r :?ei toe- re. 
this is the first Step in establishing 3 link * i : i: a seivice host. 

The other ccmpcceot cf the CGI is lie scrvld CC! 'item U{ of F:?c:c: 
2) is escd tc establish the connect ict ; t fi the sc;vice h g s : - As <:e? S 

06 the management ccosc.lt CGI queries database 212 cf Figure \ tc cbrair 
the list c f s e r r i c e s the \ 5 e r i 5 attic riled t c m a r a g c . L i c k s : c these 

s e r t i c e s are ccostrncted in tec 1 0 r rri c 1 URLs i c a ! i t fe c services c c the 
list. The database contains an entry I c : each use; t fe a : c 5 n t < i v s i s f ¥ r m 
at ion i dc lading the user : s name, password . -evei {e.g. super system adnji 
n i s t r 3 1 c r } , and a list c f services that the user is a I I c v e s t c a- a r. a g e ■ 
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A s i p e r 8 y £ t e v. a : id i ; : i I ; 1 1 r : tar rt a c 2 g t 3 ! 1 service? > n : : c : : t c ; : r ? 5 s c 
octroi p a r a me 1 e r s f ; r : h e c I h 1 1 t s e i s ! e . g . i c c i « r s y s ■ e ir. a d n: : ii i s : r a : c : S 
) . T h « list c i services ecus::;* = t s c ; f : : t :« t i y r r. * ir.* s r. f i h f • e r r : 1 1 s 
!ahc contained ir :he da :ab2Se> icsread c; -he ? c : ~ ices ! JF:L. Contrci : 
ken re teres ic s:ep SO 6 oi Flgtrt 9 where :fcc ?s;i sect;? *hich service 
s be wants t c m a n a g e free the ! : s i of s c : - i e c s . 

The preseo: InvenrlGt c n: p . c y s vaiiot* ccs|ru ; e : - i&p !e ceo ; e: operation- 
i e v Giving data stored in e cm peter systems. T : e s e c p i: i a L i c r s : c c ! l c e . bit 

are not Iicitec tc ; these reqnlrinE phsics! Eiar : p; ! 1 1 i c 6 c; physical q 
ca&tities* U s u a ! ! ? . the b g h net cccessarilt, : r e s c c, g a n- : : L : c 5 lake the i c 
rm of electrical er nagnetic signals espabie cf being stored: tracsfene 
d f comb iced, compared, and otherwise ma c ; ps I a : ed . The eper aliens desert 
bed herein that form part cf the inveciicc are csefnl ca c !» i n e operations 

The manipulations per termed are cltcu referred tc in ltric5 ; such as, 
prcdacing, idectifjlog. ruonisg, detc ici c :'eg . compzring. excelling, dem 
1 cadi Eg. or detecting. It is sometimes ccBvenics:. pi ire: pa My fcr re as 
ens cf cemmen ESage, tc refer tc these electrical or najnetic signals as 

bits. ? a 1 o e s . elements, variables, c h a r 2^ : e r * . data., or i L e lite. It s 5 
ould remembered, hesefer. thai ill of these ace sliilar terms are tc be 
associated with the a p p : c p r i a t e p h y s : c aw q 5 a'c : i i i c s a c d are mere ! y c c n t e 
oiect labels applied tc these q e a n t i : 

The p r e s e e t invent i c n also repairs, : c a device, system 0 ; 3 f p < \i a t a s . s 
ocb as browser bos! 216 and in a cagemen- console host 2H for per form leg i 
he aforementioned 0 p e • a t i c 0 s . The s y s t ecr nay be specially c r d s • : sc t e d f 
or the required purposes, g r it it a y be a general purpose c c ra p a : e : s e 1 1 c : 
ively activated or coif ige red by a computer prewar, srered [5 lit csrrpt: 
er. The processes presented above are 0 c t inherently related 1 c any pari 
icBiai computer or ether corapotiog apparatus, le particular. ? a r : c a 5 gen 
eral pnrpese cenpoters may be used *iifc programs *rit»:cr. in aceorcaEce sr 
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i t h (he tcacb :ogs here: s . o r , a ! : e r n z t i v e I y . i : mar be rr c ; e c c : " e 2 1 ■: c : ; 

0 CBBStroct 2 mere specializes ccnpster s 7 s t c ro tc perform the :;ct::tc c 
pc r a t i c c s . 

Figure 12 is a bicck diagram cf a general porpese compiler systert 
s c i tabic i c r c a : r y i 0 g c u : t s e p r c c e 5 s i u g in acccrda cce * 1 1 h c r. »: c r 5 »; c : c. 
eit qf the pies eel ir?eQtieo. The macag ecer : ecrsele prcgrac Ischdlig 
•fee aatfecnticaiiCE act access c e c t ? c ! I a j e : ran r e * i d e 5; en such a ? e n c : 5 
! purpose cccpoicr. Id addition brcirc fj - |. G r : ?i6 cat be sect 2 gtrciu 
p 1 r p c- s t ccBpolcr. F ! g t r e 12 illustrates ere embodiment c f s g t r c f a i p c 
ipese ccrcpatei system. Otter ccrcptte: < v s : c c arch i t ec 1 c r e ? at: c c d f : g u r 
a t i c n $ c a d be used f c J c a r r y i d g Get the p r 0 c e 5 S i b g c f the present : d vest 
icn. Computer sjsieffi 10C0, r.ade up cl varices s b bs y s ; ems described bclc 
v, includes at least cue rsi c ro pr c ee ss e- r subsystem (a 1 s c referred u a; a 
centra! processing nail, cr CPU) 1 0 C 2 . 11= a t is, CPU 1002 cat be impicn 
ented bj a single-chip processor or by ctliiple processors. CPU 10 62 is 
a general purpose digital prccesscr vbicfc ccoircis the epe-atinc cf the 
compater sjstcm 1 000. Using iosrruct icts retrieved f r cm mercery, tee CF 
U 1 0 02 ccnticls the reception and mac i ps i'at : c r cf inpot data, an: the cc 
tpat and display of dais en ontpat devices- 

CPU 1 0 02 is ccipiec b i - d i r e r t i c oa ! ! y ^ i : h 'a firs- p r : re a ? y storage 1054 
, typical ly a 1 and era access raeracrj [RAM), a eg 3 c i -d i -c c era i " y *iib a ■ 
ecciid primary storage area IC6G. typically a read-ccir memory (UOM) . via 
a memory bis 1 0 08. As is vci! knc*D in the art. prima'? storage 1 0 0 -f r. 
an be used as a general storage area a ac as scratch-pad memory. 2 n 6 cat 
also be used tc store inpet data and processed cats. It can aisc Sicre 
programming i b s t re c I i c n s and data, le: example u Ibe form cf a hierarch 

1 c a 1 database s c c h as database 212 in addition to 0 ! fa c : data and i 0 S 1 r t c 
tiens for processes operating cn CPU 1C02, and is esec typically bsei fc 
r fast transfer of data and i n s t r tc t i 0 1 > in a b i - d i r c c t : 0 b a i manner eve; 
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C 6 typical!: i e r . 8 5 c s b 2 S : c c p = : i : i ; g i n ? : : : c l ■ c : s . ? r c £ : a * c " i •: . : < : a £ 
nd cb;ce:i ised t} :tc CP'J idC: ic p v / f c : n3 f i ret : f-t-f . ?::-*'* ? : c r c 
ge d e f : c e i 10 04 £ [ SC : t6 rtay i - c 1 1 v c aiy sciiab'e •: crep ::er-: ca ? I ? < : c ■ 
media, descried i>i!c-. e c p c r u : t g on TtiUt.-. f:r fxa*?:?. oa:? acre 
s< needs ic b e -fe : : : c c : : cr i \ i: i z ; -s ; r c c : '. c e< 1 . CPU I 0 2 c;r. ; ; s <: ci: 
eciiy age ?e:y rapid!} rclrie^i soc s:e:i ? : c : ; c e £ : ! t necstc data in i c* 
che memcr J 1 0 U* . 

A rcmcvab:? ras? sicrzgt device 15*2 pievide; zidilio&ai ii * 1 1 s : c : s g e 
capacltF f c r the c c ra p 1 1 e r systta iGQv. s r d Is r c u p : c d ciibc: bi-directic 
d a i ) 7 cr cBi-di reci icrai : y to CPL 1002 ^ • ^ - t peripheral bus 10 H. For e 
iaople, a specilic remc-fabie id a ; s sicragc dc.icc ccniEcnly k n ; ^ d as a CD- 
ROM typically passes data ie i-d i r ec: Una 1 i > is the CPU ( 0 0 2 . *bereas a \ 
Icppy disk can pass data bl-fiirecticealij tc the CPU ! G 0 2 . 5it;aje 1 0 1 2 

may alsc include cnrcptiter-readable mecia itch as magnetic t a p t . flash id 
emcry : signals embodied fin a carrier *a?e. PC-CARDS , portable mass sura 
$e derices : he'cgiaphic storage derices, an: cthc; storage devices. \ fi 
led mass storage 1516 also provides a t c i b^i g n a ! data Si c r a g i z a p a c i \ y an: 

is copied bi-directionally Ic CPU 10C2 via peripheral bis 1111. The me 
sr ccramnc example cf mass 5 ; c r £ § e ! 0 1 6 is s -bare disk drive. G e fi e r a ! ] > - 
access tc these media is sicker than access ic primary s : c f a gc : 0 0 4 
10 56. Mass Storage IC'IZ anc 1016 fCufriiit sure additional p r eg : irar.i r.f 

instructions; data, and the like thai t y p i c a i i j are r o : i o a c : i v e i s e b 
i the CPU 1002. l! will be appreciated that tfce icicrmation :cL2:tet: *i 
thin mass storage 1012 acd 1 0 1 6 may be i occrpt r a ted . \\ oecseo. in stiod 
ard fisbico as part cf primary stcraet 10 04 [t,%. MM) a> M.'tua! m«?fu:y 



Id i dd it Icq tc providing CPU 1002 access tc stcrage s« bsys t ems . the pc 
ripherai bas 1014 is used to provide access ether subsystems a nd.de vices 
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as *H I • io ifce describes esr.bc d :mc* : . tfcese Etc ; i: J c i i : s p 1 a 7 jrrri-or 
1018 lod adapter 1020. a piitie: device 1 022 , a oeLFci :c:enaee I G 2 4 . 
an auxiliary ispot/cctpit t e " : c t hterface 1 6 2 6. i c 2 r !*2> 2 n c £ 

peakers 1 0 30. and ether subsystems a< needed. 

The oetarcrfc i d : e r f 2 c € 1024 aliews CPU 1002 to be cciplcs :c arciher :c 
mpite;. computer oetTe-rk. c: I e I e c ommt q i c a I i e cs 0 e Lars r k isinf a rc:*crk 
cCEoeciica a? sho?o. Ifcrcigt tie teUcrk icierface 1C2-!. :i :s ttnrempl 
aicd that i he CPU 1005 nigk: jccciic i 0 1 c ;ma s i c n , e.g., di:z ofejer.s cr 
prcrrara i n s i r e c i i oas : from a dc Ucr ne:*Cfk, erniffci ou:?El ic f crou : i cc 
to accibc; oclv.c;k in tfec cccrsc cl pcrlcmiog :hc a be * c- d c 5 c r [ be i ncifcc 
d Steps. Information, c f : c c represented as a sccecr.ee ?f icslrnctiocs l 
c be executed cd 3 CPU, rcaj be received frcm and cotpulU-d tc icclbci te 
twork, fcr example, ia tfcc f c 1 ic of a ccrcpnc: data signal embodied :* j 
carrier va-vc.. An. interface ca:i c: s s k i far device and appropriate sell* 
are imp 1 emeu t cd by CPU 1602 can be used ic cccncct the cornpetcr system I 
000 tc an external ocUcrk aod Uacsfcr data according tc slandarc prc-.c 
eels. Tbai is, rccibcd erabod irac 0 1 s cf the present i e > c d ; i c b rr.af ciccite 
solclr upcD CPU 1 0 0 2 , cr may be pc 1 f c rroe \ a c 1 c S s a nc'.hcrk Sidi as -he 1 
Dteroct, iatranet ict»orks t cr iccal area ict»crfcs. in c 0 e ; 0 e c 1 i c e 
a remote CPU that shares a pc/ticn cl tjic p:cccss:ng. Additional ci<« < 
toiagc devices (do: sfcovo} re a y 2 |sc be c 0 g n c c : c d t« CPU J C G 2 th.-oagb rcl 
* c 1 k interlace 1024. 

Asxiiiarj I/O derice interface 1026 represents genera: arc cnucniiec 
interfaces that ailc* tfe e CPU 1002 tc seed and, mere typical:), receive 
data from 0 1 fee r devices scefc as nicrophcics . toi c fe-s ens i : i ve display':, t 
ransdocer card readers, tape readers, ?c:ee c: I a d dsn I i i n g r eccgn I xt rs . 
biometrics readers, cameras, portable mass storage devices, arc nice: cc 
n p 1 1 e r 5 . 

Also ccopled tc the CPU 1 0 02 is a keyboard cc-EtrcMer 1 0 3 2 via a icca! 
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bcs JC34 lei rtc;*->-S is?*: J r r e. 3 kcyocarc 1 02 1 c: * nt::.' - :(T; C ? 1 

03e. arc seed i 0 g 0 c c c d c J s y m b c i 3 iron the !: c y b o z : : 1036 c : peiE'.?: zn\c 

c iC3S tc the CPU 1 0 T= 2 . The- pointer de^ce oc 3 rrrrse. r.r'z*. tk 

k u a I 1 , Gf iibiel. csd is sScfc: for : n : c : a c t ! a j[ a gran^Cc! use: : 

QIC { 2 C C - 

Id addition, enrb c -J i rcc s : s »f tic preset: ir.rerliarj fcr^he: relate i: re- 
in p:Lc: Sler&ge picdtcis £ cct.b»:c: rea:ab!e sedicu 1 h * t ccstais pr; 
gric cede to; pcrferiii&g ?*::cis ccicpi : e r - imp j ene:: t e d 0 p e f « t : c r 5 . The t 
ocpo t c f - 1 c edab 1 c rccdiuir. is iau s 1 c ; a g e cevice thai est store d a : 3 * 
hi eh caa thercafic; be f c k bv 1 cccpale: 5;. si cm. The media 3n£ prcgrac 
code may be these special I J designed and cctsi:cc;ed I g r t b e purposes 0; 

the preseot icrcalicB, cr Lhcy is a j be ci the k:cc we".! keewe tc- -fcese c 
f ordinary skill to t L c computer software *r;s. Examples cf ccmpcler-re 
ad able media include, but arc nci liciu-J t c- . all : . be media EentioBed at 
eve: magnetic media such as bard disks. Mepp? disks, ace Bagaetic tape: 

optica! media sucfc as CD-fOl' disks; ir.agnc I c~€ p t i ca I media such as f I c p t 
icai disk*; aid specially ctinligtrcd hardware devices Such as applicatic 
D-specific integrated circtits (ASICs), fkr eg r a mm a b i e Icgic ccriccs 'PLCs 
). and JtOM and RAM devices. The ccmpjte r-rcadabl e medium can aisc be di 
Stiibtted as a data signal c rn b q cl i e d it 1 ca:«rit: ^avs ever 1 eetverk f, f 
c G a p ! c d computer s \ s t c n 5 so t b a t : !. e cospc. cr-'eiasblc c ? c c : s : c r c d a r* 
d executed i rj a distributes f a s h : c e . Examples c 1 program cede i : c \ a d c b 
cth machine code, as produced, fo: example, by a c era p ; I c J - cr files etc: 
aifiing higfeer level cede that may te executed rsing an ic:ciprcie: 

It Til! be appreciated br these skilled :d tie ari that ifec aboc dtsc 
ribed hardware and scltvar* elements a*e cf s 1 2 n c a 1 d detigr- aid c c s E : r t c 
ticD. Other computer systems suitable for ise « i i h ihc ic?cn:icr. re 2 y ice 
lade additional cr fever sebSTSteras. In addi-icc. memory hz z iGGfc. pe: :p 
he ra i bus 1014 : aed 1 ccai bcs 1034 are illustrative nl a o v ; r. terccnccrt: 
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cc set etc s e / ? : § g to lick ! f- e Sihsifteic? . F c r exarrprt. i i».c> ; !?!!: 
d be used 10 c oo Be c t the CPU to fixes id a £ s storage 1D16 and d i s f : s 5 c:e? 
icr 1G2C. The ccrtpcter syslcr. shown if Figure 12 is hi: an e s 3 m ?• ! c c 
cocpolcr SFStea suitable fcr 5 s e with r h e iaveatici. 0 ; h e r ccicp;te/ i:z 
bi lectures bariog different c c n f i gc r a t I c c s cf scbsjs :ce£ mi? Us:.- i= c i: 
! i 1 e d . 

Although the foregoing itveutiGc has beee described it scire ceiall *c: v 
crposes- cf clarity of c cd er s t a nd i up . it viii be apparent thai certain ch 
anges a d d cc d i f i c a t i en $ may be practices tfithin the scope cf :he appease 
d claims- Fcr ihermcrc . it s h c 1 1 d be t c- l e d that there are a I : e r c s t : ! t c * 3 
ys cf implementing bait the process an: : apparatns cl the pre sect invent: 
cd. Fcj example, al though the in Yes Met- 1 3 ? beet describe: us! 03 2 WeH 
server as the administratice server, a n c c - We b based server can a 1 5 5 be 
esed to r n d the managenent console program. Ic another example, d a ; a b s s 
e 212 can be a distribnled database stcred en the console hes: 3 d c vgriu 
us service hosts rather than at 3 s i n g ! e p e r s i 5 1 e r x database. I z yet an 
ether example, data retrieval prctccch ether than LDAP can be used U r 
etrieve data from database 212 cr from a 'flat file store:; cc z pe is is tec 
t storage area- I c ? e 1 another example, the discover : c c i i r. e can be r s c 

'local! y" on a service best while the i-ervi'ce is being insiaiierj ins tea 
d c f a i 3 later lime c e the c c n s c i e best. A c c_c r c i 1? g " y , the preset: e n: t 
d i is e d t $ are to be considered as illustrative and net r e * 1 : i c f i v • . arc it 
e intent i c d is n c t t c be ! i m i t e d t c i h e details g i v e t [ t r e i n , b t r. roar be 

modified within the scope and equivalents of tie appended c i a i m ? . 
4 BJMEF DESCRIPTION OF D1AWISCS 

Fignrc 1 is a biect diagram cl a ccrrpeier network having msiriple s c r 7 
e j s accessible by end-users and connected t c a r. a d n i n i s t r a : i c n server no 
t eo align red with the 30 tenia led management capabilities cf the present i 
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oven t i cc . 

Figare 2 is a b!cck diagram i- s i*rvi m sic c-5tcrcc:> • i cek.c; re 
twcrk ic accordatcc ^itb -nc iir.br. err: :U rv-ci: 

Figure 3 is 2 (Unchar: $ho*ir. p ;n rr-it*- :.i ^ pr-ce^j : ; . : ,; • s : e r : 
n g a cew s e i vice cc a nei^ri: ir z •: e g - ; a r e e : : :. 'it c t. t i \ \ i n . f ; f. ? p 
resent i t v c c t i G i . 

Figure 4 is z lic^cra:: shying : : z-ea;er i o : a : , s:ef c( - c : ' Figure 3 
cf registering i scincc io a cc o rr a fir <: " : ■ I: r-rt erh<: t :r:c i : ? f :he prc-sc 
d t i » v e & : ; c n . 

Figcre b is a flcwcfca:; shoeing Id grcj^er f-ep 3^6 o.f Figure 3 

i t» accordance * i t h one c ra b c u i n e 1 » c- f i b £ p ; e ? c n ! : e v e n t i n n . 

Figure 6 is a screen sU: cf 2 graphical ise: : r : l e : f a r e displayed ca t 
he browser host i b accordance * i l h cue e a- b c s i e e ii \ c ( r h e present I c v e o i i 
oo . 

Figure 7 is a screen shot c f a graphical c s e : : r i e : f 2 c e displaced c 0 t 
be brcsser best is accordance tfitb coe embed i^ert of tre preset t ! r t e d t i 

CD. 

Figire B is a screen sIicl cf a graphic^! f s e r interlace rHaticg tcs 1 1 
e access control and au 1 he c 1 i ca I i on cf a use? cf :hp RiRagCRent console 
program in 2 cccrdance with c t e e in b c i i n: 1 c * : h e 5 r r ? e t *. i c • c r ; : 0 : . 

FigBre 9 Is a flcwcfcait cf a p:c- cess for esfs-c : ng ecc£J> c c- £ : r c I ar. : 
3 n t h c r i 1 a t i c n i g the ra a e a g e m c- n : c c d t r 0 ! p : c g r z n? 1 c a c c c- r ri 1 c f e * j ; n u c e c 
mbodiment cf the present invent i c n . 

Figare 10 is 2 Meghan cf a process fcr enforcing access entire! sac 
aatber iaaticD ir the macageccnt ccctrol p : c g r a rt :g acc«rcance v f i r cnt 
embod imeot c f the p r e s e e t i rj v c n r i c c . 

Figsre 11 is a fic*chari shewing in greater detail step ?G6 of FifErr 

9. 

Fig arc 12 is a blcck diagram cf a typicai computer sclera st i table fo* 



imp lemen i j og it e si b c d : n: c r '. of :fcc pruscot ir.tcn::c3 
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